Lucene search

K
cveMitreCVE-2006-6783
HistoryDec 28, 2006 - 12:28 a.m.

CVE-2006-6783

2006-12-2800:28:00
CWE-287
mitre
web.nvd.nist.gov
29
logahead
unu
security vulnerability
file upload
authentication bypass
cve-2006-6783
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.128

Percentile

95.5%

logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
logaheadlogahead_unuMatch1.0
VendorProductVersionCPE
logaheadlogahead_unu1.0cpe:2.3:a:logahead:logahead_unu:1.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.128

Percentile

95.5%

Related for CVE-2006-6783