PT-2006-6675 · Dosepa · Dosepa

Craig Heffner · Publicado 2006-11-21 · Atualizado 2024-02-14 · CVE-2006-6028

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DoSePa version 1.0.4

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) sequence or absolute file path in the file parameter.

Recommendations For version 1.0.4, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the textview.php file to minimize the risk of exploitation. Avoid using absolute file paths or .. (dot dot) sequences in the file parameter until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-6028

Produtos afetados

Dosepa

Referências · 7

• 🔥 http://securityfocus.com/bid/21149 · Exploit
• 🔥 https://exploit-db.com/exploits/2795 · Exploit
• 🔥 http://craigheffner.com/security/exploits/dosepa.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6028 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30349 · Nota
• http://secunia.com/advisories/22960 · Nota
• http://vupen.com/english/advisories/2006/4576 · Nota