CVE

Id
18451  
CVE No.
CVE-2006-2347  
Status
Candidate  
Description
E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via """ characters, and possibly other invalid values, in (1) the id parameter to form_grupo.html, or requests to the (2) archivos/ and (3) files/ directories. NOTE: this issue might be resultant from SQL injection.  
Phase
Assigned (20060512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
160275 18451 CVE-2006-2347 BUGTRAQ:20060511 Several flaws in e-business designer (eBD)  View
160276 18451 CVE-2006-2347 URL:http://www.securityfocus.com/archive/1/archive/1/433807/100/0/threaded  View
160277 18451 CVE-2006-2347 FULLDISC:20060511 Several flaws in e-business designer (eBD)  View
160278 18451 CVE-2006-2347 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html  View
160279 18451 CVE-2006-2347 BID:17933  View
160280 18451 CVE-2006-2347 URL:http://www.securityfocus.com/bid/17933  View
160281 18451 CVE-2006-2347 VUPEN:ADV-2006-1784  View
160282 18451 CVE-2006-2347 URL:http://www.vupen.com/english/advisories/2006/1784  View
160283 18451 CVE-2006-2347 SECUNIA:20071  View
160284 18451 CVE-2006-2347 URL:http://secunia.com/advisories/20071  View
160285 18451 CVE-2006-2347 SREASON:891  View
160286 18451 CVE-2006-2347 URL:http://securityreason.com/securityalert/891  View
160287 18451 CVE-2006-2347 XF:ebd-multiple-path-disclosure(26476)  View

Related JVN