https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:48:43 +0000 https://cve.radiocsirt.org/vuln/cve-2006-3392 <p>Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using &#34;..%01&#34; sequences, which bypass the removal of &#34;../&#34; sequences before bytes such as &#34;%01&#34; are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.</p> <p>Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using &#34;..%01&#34; sequences, which bypass the removal of &#34;../&#34; sequences before bytes such as &#34;%01&#34; are removed from the filename. NOTE: This is a different issue than CVE-2006-3274.</p> https://cve.radiocsirt.org/vuln/cve-2006-3392