Lucene search

K
nvd[email protected]NVD:CVE-2006-7202
HistoryMay 09, 2007 - 6:19 p.m.

CVE-2006-7202

2007-05-0918:19:00
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.7%

The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors.

Affected configurations

NVD
Node
mambomambo_open_sourceMatch4.6.1

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.7%

Related for NVD:CVE-2006-7202