NVD

Id
63633  
Name
CVE-2006-5027  
Description
Jeroen Vennegoor JevonCMS, possibly pre alpha, allows remote attackers to obtain sensitive information via a direct request for php/main/phplib files (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysql.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, and (7) db_pgsql.inc; and (8) db_sybase.inc, which reveals the path in various error messages.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-09-27  
Modified Date
2008-09-05  
Seq
2006-5027  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
331663 63633 CVE-2006-5027 1638  View
331664 63633 CVE-2006-5027 20060922 jevoncms (.inc) Path Disclosure  View
331665 63633 CVE-2006-5027 jevoncms-phplib-path-disclosure(29126)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59907 JVNDB-2006-002173 Jeroen Vennegoor JevonCMS における重要な情報を取得される脆弱性 Jeroen Vennegoor JevonCMS は、エラーメッセージにパスを表示する不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2006-5027 21129 CVE-2006-5027 63633 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002173.html 2006-09-27 2012-09-25 View