Lucene search

[email protected]CVE-2006-6391

HistoryDec 08, 2006 - 1:28 a.m.

CVE-2006-6391

2006-12-0801:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6391

directory traversal

open solution quick.cart 2.0

remote code execution

security vulnerability

nvd

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

80.9%

JSON

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include arbitrary files via a … (dot dot) in the config[db_type] parameter to (1) actions_admin/other.php and (2) actions_client/gallery.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
open_solution:quick.cartopen solution quick.carteq2.0

CPE	Name	Operator	Version
open_solution:quick.cart	open solution quick.cart	eq	2.0

References

secunia.com/advisories/23168

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

80.9%

JSON