Vulnerabilities > CVE-2006-2952 - Input Validation vulnerability in NPDS

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
net-portal-dynamic-system
NVD
Published: 2006-06-12
Updated: 2018-10-18

Summary

Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) Default_Theme parameter to header.php or (2) ModPath parameter to modules/cluster-paradise/cluster-E.php.

Vulnerable Configurations

Part Description Count
Application
Net_Portal_Dynamic_System
1

References