NVD

Id
59484  
Name
CVE-2006-0754  
Description
** DISPUTED ** dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error message. NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignores the installation instructions as well as warnings generated by check.php.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-02-17  
Modified Date
2011-03-07  
Seq
2006-0754  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
305960 59484 CVE-2006-0754 20060215 Re: dotproject <= 2.0.1 remote code execution  View
305961 59484 CVE-2006-0754 20060214 dotproject <= 2.0.1 remote code execution  View
305962 59484 CVE-2006-0754 16648  View
305963 59484 CVE-2006-0754 ADV-2006-0604  View
305964 59484 CVE-2006-0754 dotproject-phpinfo-check-obtain-info(24745)  View

Related JVN