Lucene search
HistoryDec 15, 2006 - 11:28 a.m.
CVE-2006-6568
cve
2006
6568
directory traversal
vulnerability
knowledge base
mxbb
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.7%
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a … (dot dot) sequence in the phpEx parameter.
Affected configurations
Node
mxbbkb_modsMatch2.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| mxbb:kb_mods | mxbb kb mods | eq | 2.0.2 |
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.7%
Related for CVE-2006-6568