Search...

BandSite CMS /includes/ Directory Multiple Script Path Disclosure

2006-09-20T15:03:50

ID OSVDB:29318
Type osvdb
Reporter OSVDB
Modified 2006-09-20T15:03:50

Description

No description provided by the source

References:

Vendor URL: http://sourceforge.net/projects/bandsitecms/ Secunia Advisory ID:21992 Related OSVDB ID: 29316 Related OSVDB ID: 29319 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0341.html CVE-2006-4986 Bugtraq ID: 20137

JSON Vulners Source

Initial Source

{"edition": 1, "title": "BandSite CMS /includes/ Directory Multiple Script Path Disclosure", "bulletinFamily": "software", "published": "2006-09-20T15:03:50", "lastseen": "2017-04-28T13:20:25", "history": [], "modified": "2006-09-20T15:03:50", "reporter": "OSVDB", "hash": "97f0bf013bf16f920121c82473da362a69cc2771a909146192e7f98b8a35c0eb", "viewCount": 0, "href": "https://vulners.com/osvdb/OSVDB:29318", "description": "# No description provided by the source\n\n## References:\nVendor URL: http://sourceforge.net/projects/bandsitecms/\n[Secunia Advisory ID:21992](https://secuniaresearch.flexerasoftware.com/advisories/21992/)\n[Related OSVDB ID: 29316](https://vulners.com/osvdb/OSVDB:29316)\n[Related OSVDB ID: 29319](https://vulners.com/osvdb/OSVDB:29319)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0341.html\n[CVE-2006-4986](https://vulners.com/cve/CVE-2006-4986)\nBugtraq ID: 20137\n", "affectedSoftware": [], "type": "osvdb", "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "d3126b6558fd4f7abc352ea80fb976e0"}, {"key": "cvss", "hash": "a792e2393dff1e200b885c5245988f6f"}, {"key": "description", "hash": "a3537b02dad62534d358147026b5a441"}, {"key": "href", "hash": "08fa855d1c86341682ac4bec14c5397f"}, {"key": "modified", "hash": "c49facb6c2e1f45286581e4ca62a1bd0"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "c49facb6c2e1f45286581e4ca62a1bd0"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "955b328dc7cd615c13af5464c9183464"}, {"key": "title", "hash": "8bf7b4e00251bdf39225df8db2bbcf46"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "references": [], "objectVersion": "1.2", "enchantments": {"score": {"value": 5.8, "vector": "NONE", "modified": "2017-04-28T13:20:25"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-4986"]}], "modified": "2017-04-28T13:20:25"}, "vulnersScore": 5.8}, "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/", "score": 5.0}, "cvelist": ["CVE-2006-4986"], "id": "OSVDB:29318"}

{"cve": [{"lastseen": "2019-05-29T18:08:34", "bulletinFamily": "NVD", "description": "Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_preview.php, and (3) adminpanel/configform.php; and files in adminpanel/includes/ including (4) mailinglist/disphtmltbl.php, (5) mailinglist/dispxls.php, (6) mailinglist/sendshows.php, (7) previews/preview_bio.php, (8) previews/preview_genmerch.php, (9) previews/preview_fliers.php, (10) previews/preview_gbook.php, (11) previews/preview_interviews.php, (12) previews/preview_links.php, (13) previews/preview_lyrics.php, (14) previews/preview_membio.php, (15) previews/preview_merchphotos.php, (16) previews/preview_mp3s.php, (17) previews/preview_news.php, (18) previews/preview_photos.php, (19) previews/preview_releases.php, (20) previews/preview_relmerch.php, (21) previews/preview_relphotos.php, (22) previews/preview_reviews.php, (23) previews/preview_shows.php, (24) previews/preview_wearmerch.php, (25) change_forms/change_bio.php, (26) change_forms/change_fliers.php, (27) change_forms/change_gbook.php, (28) change_forms/change_gen_merch.php, (29) change_forms/change_interview.php, (30) change_forms/change_links.php, (31) change_forms/change_lyrics.php, (32) change_forms/change_members.php, (33) change_forms/change_merch.php, (34) change_forms/change_merch_pic.php, (35) change_forms/change_mp3s.php, (36) change_forms/change_news.php, (37) change_forms/change_photos.php, (38) change_forms/change_rel_merch.php, (39) change_forms/change_rel_pic.php, (40) change_forms/change_releases.php, (41) change_forms/change_reviews.php, (42) change_forms/change_shows.php, and (43) change_forms/change_wear_merch.php, which reveals the path in various error messages.", "modified": "2018-10-17T21:40:00", "id": "CVE-2006-4986", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-4986", "published": "2006-09-26T02:07:00", "title": "CVE-2006-4986", "type": "cve", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}}]}