Lucene search

K
cve[email protected]CVE-2006-7035
HistoryFeb 23, 2007 - 3:28 a.m.

CVE-2006-7035

2007-02-2303:28:00
web.nvd.nist.gov
27
cve-2006-7035
remote attack
file read
super link exchange script

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

74.7%

Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via “…” sequences in the imgpath parameter.

Affected configurations

NVD
Node
super_link_exchange_scriptsuper_link_exchange_scriptMatch1.0
VendorProductVersionCPE
super_link_exchange_scriptsuper_link_exchange_script1.0cpe:/a:super_link_exchange_script:super_link_exchange_script:1.0:::

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

74.7%

Related for CVE-2006-7035