NVD

Id
61467  
Name
CVE-2006-2782  
Description
Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-03-07  
Seq
2006-2782  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317830 61467 CVE-2006-2782 oval:org.mitre.oval:def:10429  View
317831 61467 CVE-2006-2782 RHSA-2006:0609  View
317832 61467 CVE-2006-2782 1016202  View
317833 61467 CVE-2006-2782 DSA-1118  View
317834 61467 CVE-2006-2782 DSA-1120  View
317835 61467 CVE-2006-2782 DSA-1134  View
317836 61467 CVE-2006-2782 GLSA-200606-12  View
317837 61467 CVE-2006-2782 MDKSA-2006:143  View
317838 61467 CVE-2006-2782 MDKSA-2006:145  View
317839 61467 CVE-2006-2782 http://www.mozilla.org/security/announce/2006/mfsa2006-41.html  View
317840 61467 CVE-2006-2782 SUSE-SA:2006:035  View
317841 61467 CVE-2006-2782 RHSA-2006:0578  View
317842 61467 CVE-2006-2782 RHSA-2006:0594  View
317843 61467 CVE-2006-2782 RHSA-2006:0610  View
317844 61467 CVE-2006-2782 RHSA-2006:0611  View
317845 61467 CVE-2006-2782 20060602 rPSA-2006-0091-1 firefox thunderbird  View
317846 61467 CVE-2006-2782 SSRT061181  View
317847 61467 CVE-2006-2782 18228  View
317848 61467 CVE-2006-2782 USN-296-1  View
317849 61467 CVE-2006-2782 USN-296-2  View
317850 61467 CVE-2006-2782 USN-323-1  View
317851 61467 CVE-2006-2782 ADV-2006-2106  View
317852 61467 CVE-2006-2782 ADV-2006-3748  View
317853 61467 CVE-2006-2782 ADV-2008-0083  View
317854 61467 CVE-2006-2782 mozilla-firefox-textbox-file-access(26851)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58126 JVNDB-2006-000322 Mozilla Firefox/SeaMonkey の INPUT VALUE 属性の処理における任意のファイルを取得される脆弱性 Mozilla Firefox および SeaMonkey には、INPUT VALUE 属性の処理に不備が存在し、INPUT 要素の TYPE 属性がテキスト入力フィールド (TYPE="text") である場合に、VALUE 属性の入力フィールドの初期値としてファイル名を指定することで、本来リセットされるはずの値を残してしまう問題が存在します。 CVE-2006-2782 18884 CVE-2006-2782 61467 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000322.html 2006-06-01 2007-04-01 View