PT-2006-4499 · Unknown · Flv Players

Publicado 2006-07-14 · Atualizado 2018-10-18 · CVE-2006-3625

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FLV Players version 8

Description The issue allows remote attackers to obtain sensitive information. This can be achieved via a direct request to "paginate.php" or by providing an invalid p parameter to "player.php", which reveals the path in an error message.

Recommendations For FLV Players version 8, consider restricting access to the "paginate.php" and "player.php" scripts until a fix is available. As a temporary workaround, avoid using the p parameter in the "player.php" endpoint to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-3625

Produtos afetados

Flv Players

Referências · 3

• http://securityfocus.com/archive/1/439886/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27726 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3625 · Nota de Segurança