$ cve CVE-2006-0891 JSON

CVE-2006-0891 EXPLOIT

5.0

MEDIUM · CVSS 2.0 · EPSS 8.5% (pctl 95)

Patch early

A public exploit exists.

Description

Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing NULL (%00) byte in (1) the _SESSION['nocc_theme'] parameter in (a) html/footer.php; and (2) the lang and (3) theme parameters and the (4) Accept-Language HTTP header field, when force_default_lang is disabled, in (b) index.php, as demonstrated by injecting PHP code into a profile and accessing it using the lang parameter in index.php.

Scoring

CVSS	5.0 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS	8.49% — more likely to be exploited than 95% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-02-25
Last modified	2026-06-16

Affected (1)

Vendor	Product
nocc	nocc

Public exploits

Source	Title	Date
exploit-db	NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution	2006-02-23

References

→ the Explorer · watch your stack · NVD