Lucene search

[email protected]CVE-2006-0104

HistoryJan 06, 2006 - 11:03 a.m.

CVE-2006-0104

2006-01-0611:03:00

[email protected]

web.nvd.nist.gov

cve

2006

0104

directory traversal

vulnerability

tinyphpforum 3.6

security

profile

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.6%

JSON

Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a … (dot dot) in the uname parameter to profile.php.

Affected configurations

NVD

Node

ralph_cappertinyphpforumMatch3.5

ralph_cappertinyphpforumMatch3.6

ralph_cappertinyphpforumMatch3.46

ralph_cappertinyphpforumMatch3.47

ralph_cappertinyphpforumMatch3.48

ralph_cappertinyphpforumMatch3.49

ralph_cappertinyphpforumMatch3.499

CPENameOperatorVersion
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.5
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.6
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.46
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.47
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.48
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.49
ralph_capper:tinyphpforumralph capper tinyphpforumeq3.499

CPE	Name	Operator	Version
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.5
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.6
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.46
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.47
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.48
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.49
ralph_capper:tinyphpforum	ralph capper tinyphpforum	eq	3.499

References

evuln.com/vulns/14/exploit.html

evuln.com/vulns/14/summary.html

secunia.com/advisories/18293

securityreason.com/securityalert/320

securitytracker.com/id?1015436

www.osvdb.org/22258

www.securityfocus.com/archive/1/420933/100/0/threaded

www.securityfocus.com/bid/16163

www.vupen.com/english/advisories/2006/0054

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.6%

JSON

Related for CVE-2006-0104

nvd1 cvelist1 prion1