Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-2782
HistoryJun 02, 2006 - 7:02 p.m.

CVE-2006-2782

2006-06-0219:02:00
CWE-20
mitre
web.nvd.nist.gov
58
cve-2006-2782
firefox
remote code execution
security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.941

Percentile

99.2%

JSON

Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.

Affected configurations

Nvd
Node
mozillafirefoxRange≤1.5.0.3
OR
mozillaseamonkeyRange≤1.0.1
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
mozillaseamonkey*cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*

References

Related

nvd 2
prion 2
ubuntucve 2
debiancve 2
cvelist 2
mozilla 2
cve 1
openvas 27
nessus 48
ubuntu 5
osv 6
securityvulns 1
suse 2
debian 11
redhat 7
gentoo 3
centos 7
oraclelinux 2
freebsd 1
nvd
nvd
CVE-2006-2782
2006-06-02 19:02:00
CVE-2006-1729
2006-04-14 10:02:00
prion
prion
Design/Logic Flaw
2006-06-02 19:02:00
Input validation
2006-04-14 10:02:00
ubuntucve
ubuntucve
CVE-2006-2782
2006-06-02 00:00:00
CVE-2006-1729
2006-04-14 00:00:00
debiancve
debiancve
CVE-2006-2782
2006-06-02 19:02:00
CVE-2006-1729
2006-04-14 10:02:00
cvelist
cvelist
CVE-2006-2782
2006-06-02 19:00:00
CVE-2006-1729
2006-04-14 10:00:00
mozilla
mozilla
File stealing by changing input type (variant) — Mozilla
2006-06-01 00:00:00
File stealing by changing input type — Mozilla
2006-04-13 00:00:00
cve
cve
CVE-2006-1729
2006-04-14 10:02:00
openvas
openvas
Ubuntu: Security Advisory (USN-296-2)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-1120)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-296-1)
2022-08-26 00:00:00
nessus
nessus
openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-1585)
2007-10-17 00:00:00
Ubuntu 5.04 / 5.10 : firefox, mozilla-firefox vulnerabilities (USN-296-2)
2007-11-10 00:00:00
Ubuntu 5.04 / 5.10 : mozilla vulnerabilities (USN-323-1)
2007-11-10 00:00:00
ubuntu
ubuntu
firefox vulnerabilities
2006-06-09 00:00:00
mozilla vulnerabilities
2006-07-26 00:00:00
Firefox vulnerabilities
2006-07-25 00:00:00
osv
osv
mozilla-firefox - several vulnerabilities
2006-07-23 00:00:00
mozilla - several
2006-07-22 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-08-02 00:00:00
securityvulns
securityvulns
[USN-323-1] mozilla vulnerabilities
2006-07-27 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-06-23 08:11:46
remote code execution in MozillaFirefox,mozilla
2006-04-20 13:13:08
debian
debian
[SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities
2006-08-02 05:47:19
[SECURITY] [DSA 1120-1] New Mozilla Firefox packages fix several vulnerabilities
2006-07-23 06:47:55
[SECURITY] [DSA 1118-1] New Mozilla packages fix several vulnerabilities
2006-07-22 13:23:33
redhat
redhat
(RHSA-2006:0578) seamonkey security update (was mozilla)
2006-07-20 00:00:00
(RHSA-2006:0610) firefox security update
2006-07-28 00:00:00
(RHSA-2006:0611) thunderbird security update
2006-07-28 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2006-06-11 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-04-23 00:00:00
Mozilla Suite: Multiple vulnerabilities
2006-04-28 00:00:00
centos
centos
thunderbird security update
2006-07-29 11:51:27
firefox security update
2006-07-29 11:51:13
devhelp, seamonkey security update
2006-08-05 15:16:05
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2006-04-13 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.941

Percentile

99.2%

JSON
Related for CVE-2006-2782
nvd2prion2ubuntucve2debiancve2cvelist2mozilla2cve1openvas27nessus48ubuntu5osv6securityvulns1suse2debian11redhat7gentoo3centos7oraclelinux2freebsd1