Vulnerabilities > CVE-2006-6203 - Information Disclosure vulnerability in Krishan Flyspray Me1.0.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
krishan
exploit available
NVD
Published: 2006-12-01
Updated: 2017-10-19

Summary

Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Vulnerable Configurations

Part Description Count
Application
Krishan
1

Exploit-Db

descriptioncom_flyspray Mambo Com. <= 1.0.1 Remote File Disclosure Vulnerability. CVE-2006-6203. Webapps exploit for php platform
fileexploits/php/webapps/2852.txt
idEDB-ID:2852
last seen2016-01-31
modified2006-11-26
platformphp
port
published2006-11-26
reporter3l3ctric-Cracker
sourcehttps://www.exploit-db.com/download/2852/
titlecom_flyspray Mambo Com. <= 1.0.1 - Remote File Disclosure Vulnerability
typewebapps

References