Vulnerabilities > CVE-2006-2475 - Directory Traversal vulnerability in Cosmoshop 8.10.78
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
NONE Availability impact
NONE Summary
Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |