Lucene search
+L

CVE-2006-5832

🗓️ 10 Nov 2006 01:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

AIOCP 1.3.007 and earlier allows remote attackers to obtain full server path

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2006-5832
10 Nov 200601:00
–cvelist
exploitdb
Exploit DB
AIOCP 1.3.x - Multiple Vulnerabilities
6 Nov 200600:00
–exploitdb
exploitdb
Exploit DB
AIOCP 1.3.x - 'cp_show_ec_products.php' Full Path Disclosure
6 Nov 200600:00
–exploitdb
exploitdb
Exploit DB
AIOCP 1.3.x - 'cp_show_page_help.php' Full Path Disclosure
6 Nov 200600:00
–exploitdb
euvd
EUVD
EUVD-2006-5816
7 Oct 202500:30
–euvd
nvd
NVD
CVE-2006-5832
10 Nov 200601:07
–nvd
rapid7
Rapid7 Vulnerability Database (full)
CVE-2006-5832: Undefined Security Weakness
10 Nov 200600:00
–rapid7
NVD
Node
OR
aiocpaiocpMatch1.3.000
aiocpaiocpMatch1.3.001
aiocpaiocpMatch1.3.002
aiocpaiocpMatch1.3.003
aiocpaiocpMatch1.3.004
aiocpaiocpMatch1.3.005
aiocpaiocpMatch1.3.006
aiocpaiocpMatch1.3.007
ParameterPositionPathDescriptionCWE
aiocp_dp[]query parampublic/code/cp_dpage.php?choosed_language=eng&aiocp_dp[]=_mainFull Path Disclosure via aiocp_dp[] parameter
order_field[]query parampublic/code/cp_show_ec_products.php?order_field[]=Full Path Disclosure via order_field[] parameter
hp[]query parampublic/code/cp_show_page_help.php?hp[]=Full Path Disclosure via hp[] parameter
topidquery parampublic/code/cp_forum_view.php?fmode=top&topid=</textarea>'"><script>alert(document.cookie)</script>Cross-site Scripting (XSS) via cp_forum_view.php parameters (topid/forid/catid)
foridquery parampublic/code/cp_forum_view.php?fmode=top&topid=</textarea>'"><script>alert(document.cookie)</script>Cross-site Scripting (XSS) via cp_forum_view.php parameters (topid/forid/catid)
catidquery parampublic/code/cp_forum_view.php?fmode=top&topid=</textarea>'"><script>alert(document.cookie)</script>Cross-site Scripting (XSS) via cp_forum_view.php parameters (topid/forid/catid)
choosed_languagequery parampublic/code/cp_dpage.php?choosed_language=</textarea>'"><script>alert(document.cookie)</script>Cross-site Scripting (XSS) via choosed_language in cp_dpage.php
order_fieldquery parampublic/code/cp_users_online.php?order_field=</textarea>'"><script>alert(document.cookie)</script>Cross-site Scripting (XSS) via order_field in cp_users_online.php
orderdirquery parampublic/code/cp_links_search.php?orderdir=</textarea>'"><script>alert(document.cookie)</script>Cross-site Scripting (XSS) via orderdir in cp_links_search.php
load_pagequery paramadmin/code/index.php?load_page=http%3A//google.comRemote File-Include via load_page parameter
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:31Current
7.1High risk
Vulners AI Score7.1
CVSS 25
EPSS0.03008
60