Lucene search
HistoryMay 03, 2006 - 10:02 a.m.
CVE-2006-2156
cve-2006-2156
directory traversal
x7 chat 2.0
vulnerability
remote attackers
arbitrary file inclusion
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via … (dot dot) sequences in the help_file parameter.
Affected configurations
Node
x7_groupx7_chatMatch1.3.2b
ORx7_groupx7_chatMatch1.3.3b
ORx7_groupx7_chatMatch1.3.4b
ORx7_groupx7_chatMatch1.3.5b
ORx7_groupx7_chatMatch1.3.6
ORx7_groupx7_chatMatch2.0
References
Related
prion
prion
Directory traversal
2006-05-03 10:02:00
Directory traversal
2008-10-23 20:00:00
nessus
nessus
X7 Chat help/index.php help_file Parameter Local File Inclusion
2006-05-03 00:00:00
cvelist
cvelist
CVE-2006-2156
2006-05-03 10:00:00
CVE-2008-4718
2008-10-23 18:00:00
nvd
nvd
CVE-2006-2156
2006-05-03 10:02:00
CVE-2008-4718
2008-10-23 20:00:01
cve
cve
CVE-2008-4718
2008-10-23 20:00:01
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.7%
Related for CVE-2006-2156