PT-2006-3910 · Unknown · Easy Ad-Manager

Luny · Published 2006-06-13 · Updated 2017-07-20 · CVE-2006-3003

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Easy Ad-Manager (affected versions not specified)

Description The issue allows remote attackers to obtain the full installation path via an invalid mbid parameter in the details.php file. This is achieved by leaking the path in an error message. It is noted that this issue might be a result of another vulnerability, as it also produces cross-site scripting (XSS). The vendor has notified that this issue has been fixed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-3003

Affected Products

Easy Ad-Manager

References · 5

• 🔥 http://secunia.com/advisories/20539 · Exploit
• 🔥 http://securityfocus.com/archive/1/436413 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3003 · Security Note
• http://securityreason.com/securityalert/1079 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27110 · Note