Lucene search

K
nvd[email protected]NVD:CVE-2006-1812
HistoryApr 18, 2006 - 10:02 a.m.

CVE-2006-1812

2006-04-1810:02:00
web.nvd.nist.gov

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.

Affected configurations

NVD
Node
phpwebftpphpwebftpMatch3.2

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

Related for NVD:CVE-2006-1812