{"edition": 1, "title": "BandSite CMS /includes/ Directory Multiple Script Path Disclosure", "bulletinFamily": "software", "published": "2006-09-20T15:03:50", "lastseen": "2017-04-28T13:20:25", "modified": "2006-09-20T15:03:50", "reporter": "OSVDB", "viewCount": 0, "href": "https://vulners.com/osvdb/OSVDB:29318", "description": "# No description provided by the source\n\n## References:\nVendor URL: http://sourceforge.net/projects/bandsitecms/\n[Secunia Advisory ID:21992](https://secuniaresearch.flexerasoftware.com/advisories/21992/)\n[Related OSVDB ID: 29316](https://vulners.com/osvdb/OSVDB:29316)\n[Related OSVDB ID: 29319](https://vulners.com/osvdb/OSVDB:29319)\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-09/0341.html\n[CVE-2006-4986](https://vulners.com/cve/CVE-2006-4986)\nBugtraq ID: 20137\n", "affectedSoftware": [], "type": "osvdb", "references": [], "enchantments": {"score": {"value": 5.8, "vector": "NONE", "modified": "2017-04-28T13:20:25", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2006-4986"]}], "modified": "2017-04-28T13:20:25", "rev": 2}, "vulnersScore": 5.8}, "cvss": {"vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/", "score": 5.0}, "cvelist": ["CVE-2006-4986"], "id": "OSVDB:29318"}

{"cve": [{"lastseen": "2020-10-03T11:48:18", "description": "Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_preview.php, and (3) adminpanel/configform.php; and files in adminpanel/includes/ including (4) mailinglist/disphtmltbl.php, (5) mailinglist/dispxls.php, (6) mailinglist/sendshows.php, (7) previews/preview_bio.php, (8) previews/preview_genmerch.php, (9) previews/preview_fliers.php, (10) previews/preview_gbook.php, (11) previews/preview_interviews.php, (12) previews/preview_links.php, (13) previews/preview_lyrics.php, (14) previews/preview_membio.php, (15) previews/preview_merchphotos.php, (16) previews/preview_mp3s.php, (17) previews/preview_news.php, (18) previews/preview_photos.php, (19) previews/preview_releases.php, (20) previews/preview_relmerch.php, (21) previews/preview_relphotos.php, (22) previews/preview_reviews.php, (23) previews/preview_shows.php, (24) previews/preview_wearmerch.php, (25) change_forms/change_bio.php, (26) change_forms/change_fliers.php, (27) change_forms/change_gbook.php, (28) change_forms/change_gen_merch.php, (29) change_forms/change_interview.php, (30) change_forms/change_links.php, (31) change_forms/change_lyrics.php, (32) change_forms/change_members.php, (33) change_forms/change_merch.php, (34) change_forms/change_merch_pic.php, (35) change_forms/change_mp3s.php, (36) change_forms/change_news.php, (37) change_forms/change_photos.php, (38) change_forms/change_rel_merch.php, (39) change_forms/change_rel_pic.php, (40) change_forms/change_releases.php, (41) change_forms/change_reviews.php, (42) change_forms/change_shows.php, and (43) change_forms/change_wear_merch.php, which reveals the path in various error messages.", "edition": 3, "cvss3": {}, "published": "2006-09-26T02:07:00", "title": "CVE-2006-4986", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2006-4986"], "modified": "2018-10-17T21:40:00", "cpe": ["cpe:/a:grayscale:bandsite_cms:1.1"], "id": "CVE-2006-4986", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-4986", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cpe23": ["cpe:2.3:a:grayscale:bandsite_cms:1.1:*:*:*:*:*:*:*"]}]}