Lucene search
HistoryFeb 28, 2006 - 11:02 a.m.
CVE-2006-0936
cve-2006-0936
free host shop
website generator
remote authentication
arbitrary file upload
security vulnerability
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.3%
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.
Affected configurations
Node
free_host_shopwebsite_generatorMatch3.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| free_host_shop:website_generator | free host shop website generator | eq | 3.3 |
Related
prion
prion
Server side request forgery (ssrf)
2006-02-28 11:02:00
nvd
nvd
CVE-2006-0936
2006-02-28 11:02:00
cvelist
cvelist
CVE-2006-0936
2006-02-28 11:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.3%
Related for CVE-2006-0936