NVD

Id
65660  
Name
CVE-2006-7117  
Description
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-03-05  
Modified Date
2009-03-16  
Seq
2006-7117  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342020 65660 CVE-2006-7117 2863  View
342021 65660 CVE-2006-7117 21352  View
342022 65660 CVE-2006-7117 kubix-header-file-include(30570)  View
342023 65660 CVE-2006-7117 kubix-connect-info-disclosure(30572)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54432 JVNDB-2007-003124 Kubix におけるディレクトリトラバーサルの脆弱性 Kubix には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-7117 23219 CVE-2006-7117 65660 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003124.html 2007-03-05 2012-09-25 View