Lucene search
HistoryFeb 08, 2006 - 1:02 a.m.
CVE-2006-0590
mytopix
path disclosure
installation path
remote attackers
cve-2006-0590
nvd
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax.
Affected configurations
Node
jaia_interactivemytopixMatch1.2.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| jaia_interactive:mytopix | jaia interactive mytopix | eq | 1.2.3 |
Related
cvelist
cvelist
CVE-2006-0590
2006-02-08 01:00:00
nvd
nvd
CVE-2006-0590
2006-02-08 01:02:00
prion
prion
Path traversal
2006-02-08 01:02:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.3%
Related for CVE-2006-0590