Lucene search

[email protected]CVE-2006-3003

HistoryJun 13, 2006 - 1:02 a.m.

CVE-2006-3003

2006-06-1301:02:00

[email protected]

web.nvd.nist.gov

easy ad-manager

details.php

path disclosure

cve-2006-3003

nvd

cross-site scripting

xss

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON

details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting (XSS). NOTE: on 20060829, the vendor notified CVE that this issue has been fixed.

Affected configurations

NVD

Node

easy_ad-managereasy_ad-manager

CPENameOperatorVersion
easy_ad-manager:easy_ad-managereasy ad-managereq*

CPE	Name	Operator	Version
easy_ad-manager:easy_ad-manager	easy ad-manager	eq	*

References

secunia.com/advisories/20539

securityreason.com/securityalert/1079

www.securityfocus.com/archive/1/436413

exchange.xforce.ibmcloud.com/vulnerabilities/27110

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON

Related for CVE-2006-3003

nvd1 cvelist1