Vulnerabilities > CVE-2006-6757 - Information Disclosure vulnerability in Cwm-Design Cwmexplorer 1.0

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
cwm-design
exploit available
NVD
Published: 2006-12-27
Updated: 2017-10-19

Summary

Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the show_file parameter.

Vulnerable Configurations

Part Description Count
Application
Cwm-Design
2

Exploit-Db

descriptioncwmExplorer 1.0 (show_file) Source Code Disclosure Vulnerability. CVE-2006-6757. Webapps exploit for asp platform
fileexploits/asp/webapps/2963.txt
idEDB-ID:2963
last seen2016-01-31
modified2006-12-19
platformasp
port
published2006-12-19
reporterajann
sourcehttps://www.exploit-db.com/download/2963/
titlecwmExplorer 1.0 show_file Source Code Disclosure Vulnerability
typewebapps

References