Vulnerabilities > CVE-2006-5715 - Cross-Site Scripting vulnerability in EFS Software Easy Address Book 1.2

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
efs-software
exploit available
NVD
Published: 2006-11-04
Updated: 2017-10-19

Summary

Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream.

Vulnerable Configurations

Part Description Count
Application
Efs_Software
1

Exploit-Db

descriptionEFS Easy Address Book Web Server <= 1.2 Remote File Stream Exploit. CVE-2006-5715. Remote exploit for windows platform
fileexploits/windows/remote/2699.c
idEDB-ID:2699
last seen2016-01-31
modified2006-11-01
platformwindows
port
published2006-11-01
reporterGreg Linares
sourcehttps://www.exploit-db.com/download/2699/
titleEFS Easy Address Book Web Server <= 1.2 - Remote File Stream Exploit
typeremote

References