Lucene search

K
cveMitreCVE-2006-5028
HistorySep 27, 2006 - 11:07 p.m.

CVE-2006-5028

2006-09-2723:07:00
mitre
web.nvd.nist.gov
26
cve-2006-5028
directory traversal
swsoft plesk
remote attackers
filemanager.php
nvd
vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.017

Percentile

87.9%

Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a …/ (dot dot slash) in the file parameter in a chdir action.

Affected configurations

Nvd
Node
swsoftpleskMatch7.6windows
OR
swsoftplesk_reloadMatch7.5
VendorProductVersionCPE
swsoftplesk7.6cpe:/a:swsoft:plesk:7.6:::
swsoftplesk_reload7.5cpe:/a:swsoft:plesk_reload:7.5:::

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.017

Percentile

87.9%

Related for CVE-2006-5028