Lucene search
HistoryMar 05, 2007 - 8:19 p.m.
CVE-2006-7110
imce
directory traversal
vulnerability
drupal
remote authenticated users
delete
arbitrary files
7.1 High
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
70.7%
Directory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module, allows remote authenticated users to delete arbitrary files via “…” sequences.
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal:imce_module | drupal imce module | le | 1.5 |
7.1 High
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
70.7%