CVE-2006-2693 - CERT CVE
ID CVE-2006-2693
Sažetak Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
Reference
CVSS
Base: 7.1
Impact: 6.9
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE NONE NONE
CVSS vektor AV:N/AC:M/Au:N/C:C/I:N/A:N
Zadnje važnije ažuriranje 18-10-2018 - 16:41
Objavljeno 31-05-2006 - 10:06