Lucene search

[email protected]CVE-2006-5597

HistoryOct 28, 2006 - 12:07 a.m.

CVE-2006-5597

2006-10-2800:07:00

[email protected]

web.nvd.nist.gov

cve-2006-5597

remote attackers

user accounts

minihttp web forum

file server powerpack 4.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.042 Low

EPSS

Percentile

92.3%

JSON

join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.

Affected configurations

NVD

Node

minihttpweb_forum_file_sharing_sever_powerpackMatch4.0

CPENameOperatorVersion
minihttp:web_forum_file_sharing_sever_powerpackminihttp web forum file sharing sever powerpackeq4.0

CPE	Name	Operator	Version
minihttp:web_forum_file_sharing_sever_powerpack	minihttp web forum file sharing sever powerpack	eq	4.0

References

secunia.com/advisories/22568

www.securityfocus.com/bid/20743

www.vupen.com/english/advisories/2006/4217

exchange.xforce.ibmcloud.com/vulnerabilities/29826

www.exploit-db.com/exploits/2651

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.042 Low

EPSS

Percentile

92.3%

JSON

Related for CVE-2006-5597

cvelist1 nvd1