VULNERABILITY INTELLIGENCE
CVE-2006-6512
CVSS score3.5 LOW
EPSS probability1.31%
CISA KEVNot currently listed
Published2006-12-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:N/A:N
Description
Directory traversal vulnerability in the Browse function (/browse URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote authenticated users to list arbitrary directories via URL encoded backslashes ("%2F") in the path parameter.