CVE-2006-1823

Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the full pathname in an error message.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://securitytracker.com/id?1015943
http://secunia.com/advisories/19648
http://securityreason.com/securityalert/710
http://www.vupen.com/english/advisories/2006/1411
http://www.securityfocus.com/archive/1/431011/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:farsinews:farsinews:2.5.3:::::::*
	cpe:2.3:a:farsinews:farsinews:2.1_beta2:::::::*
	cpe:2.3:a:farsinews:farsinews:2.5:::::::*
	cpe:2.3:a:farsinews:farsinews:2.1:::::::*

Information

Published : 2006-04-18 03:02

Updated : 2018-10-18 09:36

NVD link : CVE-2006-1823

Mitre link : CVE-2006-1823

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

farsinews

farsinews

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://securitytracker.com/id?1015943", "name": "1015943", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/19648", "name": "19648", "tags": [], "refsource": "SECUNIA"}, {"url": "http://securityreason.com/securityalert/710", "name": "710", "tags": [], "refsource": "SREASON"}, {"url": "http://www.vupen.com/english/advisories/2006/1411", "name": "ADV-2006-1411", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.securityfocus.com/archive/1/431011/100/0/threaded", "name": "20060414 Farsinews Cross-Site Scripting & Path disclosure vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via \"..\" sequences in the archive parameter to index.php, which leaks the full pathname in an error message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-1823", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-04-18T10:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:farsinews:farsinews:2.5.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:farsinews:farsinews:2.1_beta2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:farsinews:farsinews:2.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:farsinews:farsinews:2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-18T16:36Z"}