Lucene search

K
nvd[email protected]NVD:CVE-2006-4218
HistoryAug 17, 2006 - 11:04 p.m.

CVE-2006-4218

2006-08-1723:04:00
web.nvd.nist.gov
2

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

79.5%

Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.

Affected configurations

Nvd
Node
zen_cartzen_cartMatch1.2.0d
OR
zen_cartzen_cartMatch1.2.1_patch1
OR
zen_cartzen_cartMatch1.2.1d
OR
zen_cartzen_cartMatch1.2.2d
OR
zen_cartzen_cartMatch1.2.3d
OR
zen_cartzen_cartMatch1.2.4.1
OR
zen_cartzen_cartMatch1.2.4d
OR
zen_cartzen_cartMatch1.2.5d
OR
zen_cartzen_cartMatch1.2.6d
OR
zen_cartzen_cartMatch1.3.0.2
VendorProductVersionCPE
zen_cartzen_cart1.2.0dcpe:2.3:a:zen_cart:zen_cart:1.2.0d:*:*:*:*:*:*:*
zen_cartzen_cart1.2.1_patch1cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*
zen_cartzen_cart1.2.1dcpe:2.3:a:zen_cart:zen_cart:1.2.1d:*:*:*:*:*:*:*
zen_cartzen_cart1.2.2dcpe:2.3:a:zen_cart:zen_cart:1.2.2d:*:*:*:*:*:*:*
zen_cartzen_cart1.2.3dcpe:2.3:a:zen_cart:zen_cart:1.2.3d:*:*:*:*:*:*:*
zen_cartzen_cart1.2.4.1cpe:2.3:a:zen_cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*
zen_cartzen_cart1.2.4dcpe:2.3:a:zen_cart:zen_cart:1.2.4d:*:*:*:*:*:*:*
zen_cartzen_cart1.2.5dcpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*
zen_cartzen_cart1.2.6dcpe:2.3:a:zen_cart:zen_cart:1.2.6d:*:*:*:*:*:*:*
zen_cartzen_cart1.3.0.2cpe:2.3:a:zen_cart:zen_cart:1.3.0.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

79.5%

Related for NVD:CVE-2006-4218