NVD

Id
64815  
Name
CVE-2006-6254  
Description
administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conn_cahier_de_texte.php. NOTE: it is not clear whether the scope of this issue extends above the web document root, and whether directory traversal is the primary vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-12-04  
Modified Date
2011-03-07  
Seq
2006-6254  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
338455 64815 CVE-2006-6254 http://acid-root.new.fr/poc/15061124.txt  View
338456 64815 CVE-2006-6254 1961  View
338457 64815 CVE-2006-6254 20061124 Cahier de texte V2.0 SQL Code Execution Exploit  View
338458 64815 CVE-2006-6254 21283  View
338459 64815 CVE-2006-6254 ADV-2006-4701  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59410 JVNDB-2006-001676 Cahier de texte の administration/telecharger.php におけるファイルの未解析コンテンツを取得される脆弱性 Cahier de texte の administration/telecharger.php には、ファイルの未解析コンテンツ (ソースコード) を取得される脆弱性が存在します。 CVE-2006-6254 22356 CVE-2006-6254 64815 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001676.html 2006-12-04 2012-06-26 View