5

CVE-2006-0756

Exploit
dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows remote attackers to obtain sensitive configuration information.  NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignores the installation instructions as well as warnings generated by check.php
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dotproject ≫ Dotproject Version2.0
Dotproject ≫ Dotproject Version2.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.11% 0.793
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/18879
Vendor Advisory
http://www.securityfocus.com/archive/1/424957/100/0/threaded
http://www.securityfocus.com/archive/1/425285/100/0/threaded
http://www.securityfocus.com/bid/16648
Exploit
http://www.vupen.com/english/advisories/2006/0604
https://exchange.xforce.ibmcloud.com/vulnerabilities/24745
http://securityreason.com/securityalert/434
http://www.osvdb.org/23207
http://www.osvdb.org/23208