phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts.
References
Link | Resource |
---|---|
http://sourceforge.net/project/shownotes.php?release_id=460858&group_id=176310 | Patch |
Configurations
Information
Published : 2006-12-26 15:28
Updated : 2008-09-05 14:15
NVD link : CVE-2006-6744
Mitre link : CVE-2006-6744
JSON object : View
CWE
Products Affected
phpprofiles
- phpprofiles