PT-2006-1573 · Cmseasy · Cmseasy

Publicado 2006-02-01 · Atualizado 2018-10-19 · CVE-2006-0508

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Easy CMS (affected versions not specified)

Description The issue concerns insufficient access control and enabled browsing in the images directory stored under the web document root. This allows remote attackers to list and possibly read images stored in that directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0508

Produtos afetados

Cmseasy

Referências · 5

• http://securityfocus.com/archive/1/424431/100/0/threaded · Nota
• http://secunia.com/advisories/18673 · Aviso do Fabricante
• http://securityfocus.com/archive/1/423442/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0508 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24373 · Nota