Lucene search
HistoryAug 31, 2006 - 10:04 a.m.
CVE-2006-4458
cve-2006-4458
vulnerability
directory traversal
phpgroupware
nvd
6.6 Medium
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.02 Low
EPSS
Percentile
88.9%
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a … (dot dot) sequence and trailing null (%00) byte in the GLOBALS[phpgw_info][user][preferences][common][country] parameter.
Affected configurations
Node
phpgroupwarephpgroupwareMatch0.9.16.010
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpgroupware:phpgroupware | phpgroupware | eq | 0.9.16.010 |
Related
cvelist
cvelist
CVE-2006-4458
2006-08-31 10:00:00
nvd
nvd
CVE-2006-4458
2006-08-31 10:04:00
ubuntucve
ubuntucve
CVE-2006-4458
2006-08-31 00:00:00
6.6 Medium
AI Score
Confidence
High
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.02 Low
EPSS
Percentile
88.9%
Related for CVE-2006-4458