CVE-2006-4651: Threesquared.net PHP Download Script

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakman) Php download allows remote attackers to overwrite arbitrary local files via .. (dot dot) sequence in the file parameter.

Affected products

• Threesquared.net PHP Download Script: any version

Published 2006-09-09. Last modified 2026-06-16.