PT-2006-4176 · Unknown · Dating Agent Pro

Publicado 2006-06-28 · Atualizado 2018-10-18 · CVE-2006-3282

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dating Agent PRO version 4.7.1

Description The issue allows remote attackers to obtain sensitive information via a direct request to the requirements.php file, which calls the phpinfo() function.

Recommendations For Dating Agent PRO version 4.7.1, consider removing or restricting access to the requirements.php file to prevent unauthorized disclosure of sensitive information.

Correção

Identificadores relacionados

CVE-2006-3282

Produtos afetados

Dating Agent Pro

Referências · 6

• http://secunia.com/advisories/20833 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3282 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2536 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27476 · Nota
• http://securityfocus.com/archive/1/438160/100/100/threaded · Nota
• http://securityreason.com/securityalert/1164 · Nota