exploitDog

CVE-2006-1793

Опубликовано: 17 апр. 2006

Источник: nvd

CVSS2: 7.6

EPSS Низкий

Описание

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659.

Ссылки

http://retrogod.altervista.org/runcms_13a_xpl.html
Exploit
http://www.securityfocus.com/archive/1/424708
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/16578
http://retrogod.altervista.org/runcms_13a_xpl.html
Exploit
http://www.securityfocus.com/archive/1/424708
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/16578

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:runcms:runcms:*:*:*:*:*:*:*:*

Версия до 1.2 (включая)

cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*

cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02282

Низкий

7.6 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-w89v-g2px-wf49

github

почти 4 года назад

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659.

EPSS

Процентиль: 84%

0.02282

Низкий

7.6 High

CVSS2

Дефекты

NVD-CWE-Other