PT-2006-4176 · Unknown · Dating Agent Pro

Published 2006-06-28 · Updated 2018-10-18 · CVE-2006-3282

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dating Agent PRO version 4.7.1

Description The issue allows remote attackers to obtain sensitive information via a direct request to the requirements.php file, which calls the phpinfo() function.

Recommendations For Dating Agent PRO version 4.7.1, consider removing or restricting access to the requirements.php file to prevent unauthorized disclosure of sensitive information.

Fix

Related Identifiers

CVE-2006-3282

Affected Products

Dating Agent Pro

References · 6

• http://secunia.com/advisories/20833 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3282 · Security Note
• http://vupen.com/english/advisories/2006/2536 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27476 · Note
• http://securityfocus.com/archive/1/438160/100/100/threaded · Note
• http://securityreason.com/securityalert/1164 · Note