Логотип exploitDog
bind:CVE-2006-0315
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2006-0315

Количество 2

Количество 2

nvd логотип

CVE-2006-0315

около 20 лет назад

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.

CVSS2: 5.8
EPSS: Низкий
github логотип

GHSA-p2w2-23x5-7r9p

почти 4 года назад

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2006-0315

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.

CVSS2: 5.8
4%
Низкий
около 20 лет назад
github логотип
GHSA-p2w2-23x5-7r9p

index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.

4%
Низкий
почти 4 года назад

Уязвимостей на страницу