Vulnerabilities > CVE-2006-5834 - Local File Include vulnerability in Opensolution Quick.Cms.Lite 0.3

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
opensolution
exploit available
NVD
Published: 2006-11-10
Updated: 2017-10-19

Summary

Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the sLanguage Cookie parameter.

Vulnerable Configurations

Part Description Count
Application
Opensolution
1

Exploit-Db

descriptionQuick.Cms.Lite <= 0.3 (Cookie sLanguage) Local File Include Exploit. CVE-2006-5834. Webapps exploit for php platform
fileexploits/php/webapps/2719.php
idEDB-ID:2719
last seen2016-01-31
modified2006-11-05
platformphp
port
published2006-11-05
reporterKacper
sourcehttps://www.exploit-db.com/download/2719/
titleQuick.Cms.Lite <= 0.3 Cookie sLanguage Local File Include Exploit
typewebapps

References