CVE

Id
22335  
CVE No.
CVE-2006-6231  
Status
Candidate  
Description
vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message.  
Phase
Assigned (20061201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215869 22335 CVE-2006-6231 BUGTRAQ:20060618 vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link  View
215870 22335 CVE-2006-6231 URL:http://www.securityfocus.com/archive/1/archive/1/437657/100/200/threaded  View
215871 22335 CVE-2006-6231 MISC:http://www.acid-root.new.fr/advisories/vubb021b.txt  View
215872 22335 CVE-2006-6231 VUPEN:ADV-2006-2458  View
215873 22335 CVE-2006-6231 URL:http://www.vupen.com/english/advisories/2006/2458  View
215874 22335 CVE-2006-6231 SREASON:1948  View
215875 22335 CVE-2006-6231 URL:http://securityreason.com/securityalert/1948  View
215876 22335 CVE-2006-6231 XF:vubb-multiple-path-disclosure(27299)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61258 JVNDB-2006-003524 PostNuke の Downloads モジュールにおける SQL インジェクションの脆弱性 PostNuke の Downloads モジュールには、SQL インジェクションの脆弱性が存在します。 CVE-2006-6233 22335 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003524.html  View