CVE-2006-2839

EPSS 0.81%
Veröffentlicht 06.06.2006 20:06:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Webwork ≫ Webwork Version <= 2.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.81%	0.732

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1

http://secunia.com/advisories/20405

Patch

Vendor Advisory

http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257

http://sourceforge.net/project/shownotes.php?release_id=421453

http://www.vupen.com/english/advisories/2006/2086

https://exchange.xforce.ibmcloud.com/vulnerabilities/26975

https://nvd.nist.gov/vuln/detail/CVE-2006-2839

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2839

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2839

EUVD