Lucene search

[email protected]CVE-2006-0910

HistoryFeb 28, 2006 - 11:02 a.m.

CVE-2006-0910

2006-02-2811:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0910

ipb

directory listing

vulnerability

security

nvd

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.033 Low

EPSS

Percentile

91.2%

JSON

Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including (1) sources/loginauth/convert/, (2) sources/portal_plugins/, (3) cache/skin_cache/cacheid_2/, (4) ips_kernel/PEAR/, (5) ips_kernel/PEAR/Text/, (6) ips_kernel/PEAR/Text/Diff/, (7) ips_kernel/PEAR/Text/Diff/Renderer/, (8) style_images/1/folder_rte_files/, (9) style_images/1/folder_js_skin/, (10) style_images/1/folder_rte_images/, and (11) upgrade/ and its subdirectories.

CPENameOperatorVersion
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1_beta2
invision_power_services:invision_power_boardinvision power services invision power boardeq2.0.4
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1_rc1
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1.1
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1.2
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1.3
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1_beta5
invision_power_services:invision_power_boardinvision power services invision power boardeq2.1.0
invision_power_services:invision_power_boardinvision power services invision power boardeq2.0.0
invision_power_services:invision_power_boardinvision power services invision power boardeq2.0.3

CPE	Name	Operator	Version
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1_beta2
invision_power_services:invision_power_board	invision power services invision power board	eq	2.0.4
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1_rc1
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1.1
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1.2
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1.3
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1_beta5
invision_power_services:invision_power_board	invision power services invision power board	eq	2.1.0
invision_power_services:invision_power_board	invision power services invision power board	eq	2.0.0
invision_power_services:invision_power_board	invision power services invision power board	eq	2.0.3

Rows per page:

1-10 of 151

References

neosecurityteam.net/advisories/Advisory-16.txt

neosecurityteam.net/index.php?action=advisories&id=16

www.securityfocus.com/archive/1/425713/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/24840

7.5 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.033 Low

EPSS

Percentile

91.2%

JSON

Related for CVE-2006-0910

prion1