7.5
CVE-2006-0899
- EPSS 9.76%
- Veröffentlicht 27.02.2006 19:06:00
- Zuletzt bearbeitet 16.06.2026 22:21:31
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginDirectory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
4images ≫ Image Gallery Management System Version <= 1.7.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.76% | 0.949 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://retrogod.altervista.org/4images_171_adv.html
http://secunia.com/advisories/19026
http://securityreason.com/securityalert/518
http://www.osvdb.org/23529
http://www.securityfocus.com/archive/1/426468/100/0/threaded
http://www.securityfocus.com/bid/16855
http://www.vupen.com/english/advisories/2006/0754
https://exchange.xforce.ibmcloud.com/vulnerabilities/24938
https://www.exploit-db.com/exploits/1533