Lucene search

K
cve[email protected]CVE-2006-5846
HistoryNov 10, 2006 - 2:07 a.m.

CVE-2006-5846

2006-11-1002:07:00
CWE-22
web.nvd.nist.gov
19
4
cve-2006-5846
directory traversal
freewebshop
vulnerability
security
remote attack

6.9 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.011 Low

EPSS

Percentile

84.2%

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a … (dot dot) in the page parameter, a different vector than CVE-2006-5773.

Social References

More

6.9 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.011 Low

EPSS

Percentile

84.2%

Related for CVE-2006-5846