PT-2006-3910 · Unknown · Easy Ad-Manager

Luny · Publicado 2006-06-13 · Atualizado 2017-07-20 · CVE-2006-3003

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Easy Ad-Manager (affected versions not specified)

Description The issue allows remote attackers to obtain the full installation path via an invalid mbid parameter in the details.php file. This is achieved by leaking the path in an error message. It is noted that this issue might be a result of another vulnerability, as it also produces cross-site scripting (XSS). The vendor has notified that this issue has been fixed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-3003

Produtos afetados

Easy Ad-Manager

Referências · 5

• 🔥 http://secunia.com/advisories/20539 · Exploit
• 🔥 http://securityfocus.com/archive/1/436413 · Exploit
• http://securityreason.com/securityalert/1079 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3003 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27110 · Nota