Lucene search
HistoryNov 15, 2006 - 3:07 p.m.
CVE-2006-5905
web directory pro
remote attackers
database backup
configuration modification
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.034 Low
EPSS
Percentile
91.4%
Web Directory Pro allows remote attackers to (1) backup the database and obtain the backup via a direct request to admin/backup_db.php or (2) modify configuration via a direct request to admin/options.php.
Affected configurations
Node
web_directory_proweb_directory_pro
| CPE | Name | Operator | Version |
|---|---|---|---|
| web_directory_pro:web_directory_pro | web directory pro | eq | * |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.034 Low
EPSS
Percentile
91.4%
Related for CVE-2006-5905