exploitDog

CVE-2006-5109

Опубликовано: 03 окт. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, and cat_navi.php vectors are already covered by CVE-2005-0607.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:devellion:cubecart:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:devellion:cubecart:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:devellion:cubecart:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:devellion:cubecart:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:devellion:cubecart:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:devellion:cubecart:2.0.6:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00477

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-pfhq-6vxc-8h4h

github

почти 4 года назад

Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, and cat_navi.php vectors are already covered by CVE-2005-0607.

EPSS

Процентиль: 64%

0.00477

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other