PT-2006-2998 · Sl Site · Sl Site

Publicado 2006-04-25 · Atualizado 2017-07-20 · CVE-2006-2014

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SL site version 1.0

Description A directory traversal issue exists due to improper handling of the rep parameter in gallerie.php, allowing remote attackers to list images in arbitrary directories by using ".." sequences. This could potentially lead to resultant XSS from an error message.

Recommendations For SL site version 1.0, as a temporary workaround, consider restricting access to the gallerie.php file until a proper fix is applied, and avoid using the rep parameter in a way that could facilitate directory traversal attacks.

Exploit

Correção

Identificadores relacionados

CVE-2006-2014

Produtos afetados

Sl Site

Referências · 8

• 🔥 http://securitytracker.com/id?1015972 · Exploit
• http://secunia.com/advisories/19792 · Aviso do Fabricante
• http://securityfocus.com/bid/17672 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26037 · Nota
• http://securityfocus.com/bid/17667 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2014 · Nota de Segurança
• http://vupen.com/english/advisories/2006/1487 · Nota
• http://osvdb.org/24897 · Nota