Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2006-7082
cve-2006-7082
rigter portal system
rps
authentication bypass
remote attackers
file upload
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.4%
Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests to (1) adm/photos/images.php and (2) adm/down/files.php.
Affected configurations
Node
rigter_portal_systemrigter_portal_systemMatch1.0
ORrigter_portal_systemrigter_portal_systemMatch2.0
ORrigter_portal_systemrigter_portal_systemMatch3.0
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.4%
Related for CVE-2006-7082