PT-2006-4499 · Unknown · Flv Players

Published 2006-07-14 · Updated 2018-10-18 · CVE-2006-3625

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FLV Players version 8

Description The issue allows remote attackers to obtain sensitive information. This can be achieved via a direct request to "paginate.php" or by providing an invalid p parameter to "player.php", which reveals the path in an error message.

Recommendations For FLV Players version 8, consider restricting access to the "paginate.php" and "player.php" scripts until a fix is available. As a temporary workaround, avoid using the p parameter in the "player.php" endpoint to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-3625

Affected Products

Flv Players

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-3625 · Security Note
• http://securityfocus.com/archive/1/439886/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27726 · Note