Vulnerabilities > CVE-2006-6755 - Information Disclosure vulnerability in Ixprim CMS 1.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim_api.php, which reveals the path in an error message.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Ixprim CMS 1.2 Remote Blind SQL Injection Exploit. CVE-2006-6755,CVE-2006-6756. Webapps exploit for php platform |
| file | exploits/php/webapps/2975.pl |
| id | EDB-ID:2975 |
| last seen | 2016-01-31 |
| modified | 2006-12-21 |
| platform | php |
| port | |
| published | 2006-12-21 |
| reporter | DarkFig |
| source | https://www.exploit-db.com/download/2975/ |
| title | Ixprim CMS 1.2 - Remote Blind SQL Injection Exploit |
| type | webapps |