PT-2006-6883 · Unknown · Cahier De Texte
Darkfig
·
Publicado
2006-12-04
·
Atualizado
2018-10-17
·
CVE-2006-6254
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Cahier de texte version 2.0
Description
The issue allows remote attackers to obtain unparsed content, specifically source code, of files. This is achieved via the
chemin parameter in the administration/telecharger.php file. An example of exploitation includes using directory traversal sequences to access sensitive information, such as the MySQL username and password from conn cahier de texte.php. The full scope of this issue, including whether it extends beyond the web document root and the primary nature of the vulnerability, is not entirely clear.Recommendations
For Cahier de texte version 2.0, consider restricting access to the administration/telecharger.php file and the
chemin parameter to minimize the risk of exploitation. As a temporary workaround, restrict directory traversal to prevent unauthorized access to sensitive files.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cahier De Texte