Lucene search
MitreCVE-2006-6377HistoryDec 07, 2006 - 5:28 p.m.
CVE-2006-6377
2006-12-0717:28:00
mitre
web.nvd.nist.gov
30
cve-2006-6377
uploadscript
security vulnerability
sensitive data
access control
admin password hash
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.079
Percentile
94.3%
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt.
Affected configurations
Node
uploadscriptuploadscriptRange≤1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| uploadscript | uploadscript | * | cpe:2.3:a:uploadscript:uploadscript:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-6377
2006-12-07 17:00:00
exploitdb
exploitdb
Uploadscript 1.0 - Multiple Vulnerabilities
2009-12-13 00:00:00
nvd
nvd
CVE-2006-6377
2006-12-07 17:28:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.079
Percentile
94.3%
Related for CVE-2006-6377