NVD

Id
65078  
Name
CVE-2006-6533  
Description
Directory traversal vulnerability in admin/templates_boxes_layout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. (dot dot) in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-13  
Modified Date
2011-03-07  
Seq
2006-6533  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339853 65078 CVE-2006-6533 http://lostmon.blogspot.com/2006/12/oscommerce-traversal-arbitrary-file.html  View
339854 65078 CVE-2006-6533 1017353  View
339855 65078 CVE-2006-6533 21477  View
339856 65078 CVE-2006-6533 ADV-2006-4895  View
339857 65078 CVE-2006-6533 oscommerce-filtertemplate-file-include(30767)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60295 JVNDB-2006-002561 osCommerce の admin/templates_boxes_layout.php におけるディレクトリトラバーサルの脆弱性 osCommerce の admin/templates_boxes_layout.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-6533 22635 CVE-2006-6533 65078 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002561.html 2006-12-13 2012-09-25 View