NVD

Id
62594  
Name
CVE-2006-3936  
Description
system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-07-31  
Modified Date
2008-09-05  
Seq
2006-3936  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325297 62594 CVE-2006-3936 http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt  View
325298 62594 CVE-2006-3936 1302  View
325299 62594 CVE-2006-3936 http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip  View
325300 62594 CVE-2006-3936 http://www.opencms.org/opencms/en/shownews.html?id=1002  View
325301 62594 CVE-2006-3936 20060726 Multiple vulnerabilities in OpenCMS  View
325302 62594 CVE-2006-3936 opencms-editor-information-disclosure(28001)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60694 JVNDB-2006-002960 Alcacon OpenCms の system/workplace/editors/editor.jsp における任意の JSP ファイルのソースコードを読まれる脆弱性 Alcacon OpenCms の system/workplace/editors/editor.jsp には、任意の JSP ファイルのソースコードを読まれる脆弱性が存在します。 CVE-2006-3936 20038 CVE-2006-3936 62594 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002960.html 2006-07-21 2012-12-20 View