Логотип exploitDog
bind:CVE-2006-7112
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2006-7112

Количество 2

Количество 2

nvd логотип

CVE-2006-7112

почти 19 лет назад

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it.

CVSS2: 6
EPSS: Низкий
github логотип

GHSA-44ch-2f85-f4rm

почти 4 года назад

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2006-7112

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it.

CVSS2: 6
4%
Низкий
почти 19 лет назад
github логотип
GHSA-44ch-2f85-f4rm

Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it.

4%
Низкий
почти 4 года назад

Уязвимостей на страницу