7.5

CVE-2006-6246

Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to (1) camera del, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, (6) folder.content, and possibly other operations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Photo Organizer ≫ Photo Organizer Version <= 2.32b
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.61% 0.728
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://po.shaftnet.org/po_stable_changelog
Patch
http://secunia.com/advisories/23176
http://www.securityfocus.com/bid/21351
Patch
http://www.vupen.com/english/advisories/2006/4766
http://bugs.shaftnet.org/task/113
https://exchange.xforce.ibmcloud.com/vulnerabilities/30577