Lucene search

MitreCVE-2006-6392

HistoryDec 08, 2006 - 1:28 a.m.

CVE-2006-6392

2006-12-0801:28:00

mitre

web.nvd.nist.gov

cve-2006-6392

plx web studio

plxwebdev

directory traversal

remote code execution

information disclosure

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.007

Percentile

79.6%

JSON

Directory traversal vulnerability in index.php in plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a … (dot dot) in the read parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

plx_web_studioplx_payRange≤3.2

plx_web_studioplx_payMatch3.0

VendorProductVersionCPE
plx_web_studioplx_pay*cpe:2.3:a:plx_web_studio:plx_pay:*:*:*:*:*:*:*:*
plx_web_studioplx_pay3.0cpe:2.3:a:plx_web_studio:plx_pay:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
plx_web_studio	plx_pay	*	cpe:2.3:a:plx_web_studio:plx_pay::::::::
plx_web_studio	plx_pay	3.0	cpe:2.3:a:plx_web_studio:plx_pay:3.0:::::::*

References

secunia.com/advisories/23190

www.securityfocus.com/bid/21379

www.vupen.com/english/advisories/2006/4809

exchange.xforce.ibmcloud.com/vulnerabilities/30619

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.007

Percentile

79.6%

JSON

Related for CVE-2006-6392