CVE-2006-6384

CVE-2006-6384 describes an absolute path traversal vulnerability in john_goodman's abitwhizzy software, specifically in abitwhizzy.php before version 20061204. This flaw allows unauthenticated remote attackers to read arbitrary files on the server by supplying an absolute pathname in the 'f' parameter. With a CVSS score of 7.8, this vulnerability is considered high severity, enabling complete confidentiality compromise without requiring authentication or complex attack methods. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.