Lucene search
HistoryDec 27, 2006 - 1:28 a.m.
CVE-2006-6757
cve-2006-6757
directory traversal
index.php
cwmexplorer 1.0
remote attackers
sensitive information.
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.9%
Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the show_file parameter.
Affected configurations
Node
cwm-designcwmexplorerRange≤1.1
ORcwm-designcwmexplorerMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cwm-design:cwmexplorer | cwm-design cwmexplorer | le | 1.1 |
| cwm-design:cwmexplorer | cwm-design cwmexplorer | eq | 1.0 |
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.9%
Related for CVE-2006-6757