Lucene search
HistoryMar 21, 2006 - 2:06 a.m.
CVE-2006-1340
cve-2006-1340
cutenews
path disclosure
invalid file path
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.5%
CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.
Affected configurations
Node
cutephpcutenewsRange≤1.4.1
ORcutephpcutenewsMatch0.88
ORcutephpcutenewsMatch1.3
ORcutephpcutenewsMatch1.3.1
ORcutephpcutenewsMatch1.3.2
ORcutephpcutenewsMatch1.3.6
ORcutephpcutenewsMatch1.4.0
Related
prion
prion
Path traversal
2006-03-21 02:06:00
nvd
nvd
CVE-2006-1340
2006-03-21 02:06:00
cvelist
cvelist
CVE-2006-1340
2006-03-21 02:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.5%
Related for CVE-2006-1340