CVEvulnerability
CVE-2006-2839
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory.
Affected configurations
• webwork webwork (<= 2.2.0)
References
- http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1 devel.webwork.rochester.edu
- http://secunia.com/advisories/20405 Patch, Vendor Advisory
- http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257 sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=421453 sourceforge.net
- http://www.vupen.com/english/advisories/2006/2086 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26975 exchange.xforce.ibmcloud.com
- http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1 devel.webwork.rochester.edu
- http://secunia.com/advisories/20405 Patch, Vendor Advisory
- http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257 sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=421453 sourceforge.net
- http://www.vupen.com/english/advisories/2006/2086 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26975 exchange.xforce.ibmcloud.com