CVE-2006-0519 : SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attack

SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message.

Published 2006-02-02 11:02:00

Updated 2017-07-20 01:29:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-0519

Spip » Spip
Versions up to, including, (<=) 1.9_alpha2_5539
cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*
Matching versions
Spip » Spip
Versions up to, including, (<=) 1.8.2e
cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-0519

EPSS FAQ

0.66%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0519

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2006-0519

http://www.vupen.com/english/advisories/2006/0398

Site en construction

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/24399

SPIP inc-messforum.php3 path disclosure CVE-2006-0519 Vulnerability Report
http://www.zone-h.org/en/advisories/read/id=8650/

Zone-H.org - Unrestricted information
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2006-0519

Products affected by CVE-2006-0519

Exploit prediction scoring system (EPSS) score for CVE-2006-0519

CVSS scores for CVE-2006-0519

References for CVE-2006-0519