6.8

CVE-2006-6257

Exploit
The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Alternc ≫ Alternc Version <= 0.9.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.52% 0.712
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/23144
http://securityreason.com/securityalert/1965
http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt
Vendor Advisory
Exploit
http://www.securityfocus.com/archive/1/452988/100/0/threaded
http://www.securityfocus.com/bid/21355
Exploit
http://www.vupen.com/english/advisories/2006/4851