CVE-2006-6257 - The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attac

CVE-2006-6257

Summary

The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message. Successful exploitation requires that warnings are enabled in PHP.

References

Vulnerable Configurations

cpe:2.3:a:alternc:alternc:*:*:*:*:*:*:*:*
cpe:2.3:a:alternc:alternc:*:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 17-10-2018 - 21:47)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	21355
bugtraq	20061128 Multiple Vulnerabilities in AlternC version 0.9.5
misc	http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt
secunia	23144
sreason	1965
vupen	ADV-2006-4851

Last major update

17-10-2018 - 21:47

Published

04-12-2006 - 11:28

Last modified

17-10-2018 - 21:47