CVE-2006-6392

Опубликовано: 08 дек. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Directory traversal vulnerability in index.php in plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a .. (dot dot) in the read parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Ссылки

http://secunia.com/advisories/23190
Patch
Vendor Advisory
http://www.securityfocus.com/bid/21379
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4809
https://exchange.xforce.ibmcloud.com/vulnerabilities/30619
http://secunia.com/advisories/23190
Patch
Vendor Advisory
http://www.securityfocus.com/bid/21379
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4809
https://exchange.xforce.ibmcloud.com/vulnerabilities/30619

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:plx_web_studio:plx_pay:*:*:*:*:*:*:*:*

Версия до 3.2 (включая)

cpe:2.3:a:plx_web_studio:plx_pay:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01031

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qv83-4x5r-c2c6

github

почти 4 года назад