{"api_version":"1","generated_at":"2026-07-23T07:49:02+00:00","cve":"CVE-2006-3274","urls":{"html":"https://cve.report/CVE-2006-3274","api":"https://cve.report/api/cve/CVE-2006-3274.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3274","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3274"},"summary":{"title":"CVE-2006-3274","description":"Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \\ (backslash) characters in the URL to certain directories under the web root, such as the image directory.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-06-28 22:05:00","updated_at":"2018-10-18 16:46:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://jvn.jp/jp/JVN%2367974490/index.html","name":"JVN#67974490","refsource":"JVN","tags":[],"title":"JVN#67974490: Webmin におけるディレクトリトラバーサルの脆弱性","mime":"text/xml","httpstatus":"200","archivestatus":"404"},{"url":"http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html","name":"http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html","refsource":"MISC","tags":[],"title":"セキュリティ対策のラック｜情報を守るセキュリティ対策のパイオニア","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/18613","name":"18613","refsource":"BID","tags":[],"title":"Webmin Remote Directory Traversal Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/438149/100/0/threaded","name":"20060623 [SNS Advisory No.88] Webmin Directory Traversal Vulnerability","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.webmin.com/changes.html","name":"http://www.webmin.com/changes.html","refsource":"CONFIRM","tags":[],"title":"Webmin","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2493","name":"ADV-2006-2493","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27366","name":"webmin-backslash-directory-traversal(27366)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1161","name":"1161","refsource":"SREASON","tags":[],"title":"SecurityReason - Webmin Directory Traversal Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/20777","name":"20777","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Webmin Directory Traversal Vulnerability - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016375","name":"1016375","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Webmin for Windows Error in Parsing '\\' Backslash Character Permits Directory Traversal Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/jp/JVN#67974490/index.html","name":"JVN:JVN#67974490","refsource":"MITRE","tags":[],"title":"","mime":"text/plain","httpstatus":"404","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3274","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3274","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"1.2.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3274","vulnerable":"1","versionEndIncluding":"1.2.70","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"webmin","cpe5":"webmin","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3274","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \\ (backslash) characters in the URL to certain directories under the web root, such as the image directory."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20060623 [SNS Advisory No.88] Webmin Directory Traversal Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/438149/100/0/threaded"},{"name":"webmin-backslash-directory-traversal(27366)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27366"},{"name":"http://www.webmin.com/changes.html","refsource":"CONFIRM","url":"http://www.webmin.com/changes.html"},{"name":"1161","refsource":"SREASON","url":"http://securityreason.com/securityalert/1161"},{"name":"1016375","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016375"},{"name":"20777","refsource":"SECUNIA","url":"http://secunia.com/advisories/20777"},{"name":"ADV-2006-2493","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/2493"},{"name":"JVN#67974490","refsource":"JVN","url":"http://jvn.jp/jp/JVN%2367974490/index.html"},{"name":"18613","refsource":"BID","url":"http://www.securityfocus.com/bid/18613"},{"name":"http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html","refsource":"MISC","url":"http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/88_e.html"}]}},"nvd":{"publishedDate":"2006-06-28 22:05:00","lastModifiedDate":"2018-10-18 16:46:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:webmin:webmin:1.2.50:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:webmin:webmin:1.2.30:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:webmin:webmin:1.2.60:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:webmin:webmin:1.2.40:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.70","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3274","Ordinal":"18599","Title":"CVE-2006-3274","CVE":"CVE-2006-3274","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3274","Ordinal":"1","NoteData":"Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \\ (backslash) characters in the URL to certain directories under the web root, such as the image directory.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3274","Ordinal":"2","NoteData":"2006-06-28","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3274","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}