CVE-2006-0891

CVE-2006-0891 describes multiple directory traversal vulnerabilities in NOCC Webmail 1.0. Attackers can exploit these flaws by injecting “../” sequences and a NULL byte into various parameters, including _SESSION['nocc_theme'], lang, and theme, or the Accept-Language HTTP header. This allows for arbitrary file inclusion, potentially leading to remote code execution by injecting and then accessing PHP code. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, primarily impacting integrity by allowing unauthorized file manipulation. While the EPSS score is low, the FAUCET Risk Score is high at 84/100, suggesting a significant potential risk despite its age. There is no evidence of active exploitation in the KEV catalog or Hot List, and it receives minimal community discussion or media coverage. However, an exploit module for local file inclusion and remote code execution is available on ExploitDB, indicating that proof-of-concept code exists and could be leveraged by attackers.