Lucene search
HistoryJun 23, 2006 - 12:02 a.m.
CVE-2006-3194
cve
2006
3194
directory traversal
vulnerability
index.php
singapore 0.10.0
nvd
7.1 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.017 Low
EPSS
Percentile
87.8%
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a … (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.
Affected configurations
Node
singaporesingaporeMatch0.9.1_beta
ORsingaporesingaporeMatch0.9.2_beta
ORsingaporesingaporeMatch0.9.3_beta
ORsingaporesingaporeMatch0.9.4_beta
ORsingaporesingaporeMatch0.9.5_beta
ORsingaporesingaporeMatch0.9.6_beta
ORsingaporesingaporeMatch0.9.7
ORsingaporesingaporeMatch0.9.7_beta
ORsingaporesingaporeMatch0.9.8_beta
ORsingaporesingaporeMatch0.9.9a_beta
ORsingaporesingaporeMatch0.9.9b_beta
ORsingaporesingaporeMatch0.9.10
ORsingaporesingaporeMatch0.9.10_beta
ORsingaporesingaporeMatch0.9.11_beta
ORsingaporesingaporeMatch0.9_beta
ORsingaporesingaporeMatch0.9a_beta
ORsingaporesingaporeMatch0.10.0
7.1 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.017 Low
EPSS
Percentile
87.8%
Related for CVE-2006-3194