Vulnerabilities > CVE-2006-6381 - Directory Traversal vulnerability in Ultimate HelpDesk
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities. CVE-2006-6380,CVE-2006-6381. Webapps exploit for asp platform |
file | exploits/asp/webapps/2881.txt |
id | EDB-ID:2881 |
last seen | 2016-01-31 |
modified | 2006-12-01 |
platform | asp |
port | |
published | 2006-12-01 |
reporter | ajann |
source | https://www.exploit-db.com/download/2881/ |
title | Ultimate HelpDesk XSS/Local File Disclosure Vulnerabilities |
type | webapps |