Lucene search

K
cveMitreCVE-2006-1114
HistoryMar 09, 2006 - 1:06 p.m.

CVE-2006-1114

2006-03-0913:06:00
mitre
web.nvd.nist.gov
27
cve
directory traversal
vulnerability
loudblog
remote attackers
arbitrary files
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.017

Percentile

87.9%

Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a … (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b) inc/backend_settings.php.

Affected configurations

Nvd
Node
gerrit_van_aakenloudblogMatch0.41
VendorProductVersionCPE
gerrit_van_aakenloudblog0.41cpe:2.3:a:gerrit_van_aaken:loudblog:0.41:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.017

Percentile

87.9%

Related for CVE-2006-1114