3.6

CVE-2006-4246

Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.

Data is provided by the National Vulnerability Database (NVD)
Usermin ≫ Usermin Version <= 1.210
Usermin ≫ Usermin Version0.4
Usermin ≫ Usermin Version0.5
Usermin ≫ Usermin Version0.6
Usermin ≫ Usermin Version0.7
Usermin ≫ Usermin Version0.8
Usermin ≫ Usermin Version0.9
Usermin ≫ Usermin Version0.91
Usermin ≫ Usermin Version0.92
Usermin ≫ Usermin Version0.93
Usermin ≫ Usermin Version0.94
Usermin ≫ Usermin Version0.95
Usermin ≫ Usermin Version0.96
Usermin ≫ Usermin Version0.97
Usermin ≫ Usermin Version0.98
Usermin ≫ Usermin Version0.99
Usermin ≫ Usermin Version1.000
Usermin ≫ Usermin Version1.010
Usermin ≫ Usermin Version1.020
Usermin ≫ Usermin Version1.030
Usermin ≫ Usermin Version1.040
Usermin ≫ Usermin Version1.051
Usermin ≫ Usermin Version1.060
Usermin ≫ Usermin Version1.070
Usermin ≫ Usermin Version1.080
Usermin ≫ Usermin Version1.090
Usermin ≫ Usermin Version1.100
Usermin ≫ Usermin Version1.110
Usermin ≫ Usermin Version1.120
Usermin ≫ Usermin Version1.130
Usermin ≫ Usermin Version1.140
Usermin ≫ Usermin Version1.150
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.54% 0.667
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:N/A:P