PT-2006-2998 · Sl Site · Sl Site

Published 2006-04-25 · Updated 2017-07-20 · CVE-2006-2014

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SL site version 1.0

Description A directory traversal issue exists due to improper handling of the rep parameter in gallerie.php, allowing remote attackers to list images in arbitrary directories by using ".." sequences. This could potentially lead to resultant XSS from an error message.

Recommendations For SL site version 1.0, as a temporary workaround, consider restricting access to the gallerie.php file until a proper fix is applied, and avoid using the rep parameter in a way that could facilitate directory traversal attacks.

Exploit

Fix

Related Identifiers

CVE-2006-2014

Affected Products

Sl Site

References · 8

• 🔥 http://securitytracker.com/id?1015972 · Exploit
• http://secunia.com/advisories/19792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2014 · Security Note
• http://securityfocus.com/bid/17672 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26037 · Note
• http://securityfocus.com/bid/17667 · Note
• http://vupen.com/english/advisories/2006/1487 · Note
• http://osvdb.org/24897 · Note