PT-2006-6675 · Dosepa · Dosepa

Craig Heffner · Published 2006-11-21 · Updated 2024-02-14 · CVE-2006-6028

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DoSePa version 1.0.4

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) sequence or absolute file path in the file parameter.

Recommendations For version 1.0.4, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the textview.php file to minimize the risk of exploitation. Avoid using absolute file paths or .. (dot dot) sequences in the file parameter until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-6028

Affected Products

Dosepa

References · 7

• 🔥 http://securityfocus.com/bid/21149 · Exploit
• 🔥 https://exploit-db.com/exploits/2795 · Exploit
• 🔥 http://craigheffner.com/security/exploits/dosepa.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6028 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30349 · Note
• http://secunia.com/advisories/22960 · Note
• http://vupen.com/english/advisories/2006/4576 · Note