Lucene search
HistoryApr 14, 2006 - 11:02 p.m.
CVE-2006-1791
cve-2006-1791
quickblogger 1.4
remote attackers
directory traversal vulnerability
xss
acc.php
nvd
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers to read or include arbitrary local files via the request parameter. NOTE: this issue can also produce resultant XSS when the associated include statement fails.
Affected configurations
Node
jl_webworksquickbloggerMatch1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| jl_webworks:quickblogger | jl webworks quickblogger | eq | 1.4 |
Related
nvd
nvd
CVE-2006-1791
2006-04-14 23:02:00
cvelist
cvelist
CVE-2006-1791
2006-04-14 23:00:00
prion
prion
Directory traversal
2006-04-14 23:02:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.1%
Related for CVE-2006-1791