CVE-2006-1718

Опубликовано: 11 апр. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc.

Ссылки

http://advisories.echo.or.id/adv/adv28-K-159-2006.txt
Exploit
Vendor Advisory
http://secunia.com/advisories/19579
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/430369/100/0/threaded
http://www.securityfocus.com/bid/17461
Exploit
http://www.vupen.com/english/advisories/2006/1316
https://exchange.xforce.ibmcloud.com/vulnerabilities/25720
http://advisories.echo.or.id/adv/adv28-K-159-2006.txt
Exploit
Vendor Advisory
http://secunia.com/advisories/19579
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/430369/100/0/threaded
http://www.securityfocus.com/bid/17461
Exploit
http://www.vupen.com/english/advisories/2006/1316
https://exchange.xforce.ibmcloud.com/vulnerabilities/25720

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:clever_copy:clever_copy:*:*:*:*:*:*:*:*

Версия до 3.0 (включая)

cpe:2.3:a:clever_copy:clever_copy:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:clever_copy:clever_copy:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:clever_copy:clever_copy:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:clever_copy:clever_copy:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:clever_copy:clever_copy:2.0:*:*:*:*:*:*:*

cpe:2.3:a:clever_copy:clever_copy:2.0a:*:*:*:*:*:*:*

cpe:2.3:a:clever_copy:clever_copy:23.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06194

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9cf8-98jx-p4x3

github

почти 4 года назад