CVE-2006-0882 : Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allow

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php.

Published 2006-02-24 11:02:00

Updated 2018-10-18 16:29:33

Source MITRE

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2006-0882

Phpoutsourcing » Noahs Classifieds » Version: 1.2
cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.2:*:*:*:*:*:*:*
Matching versions
Phpoutsourcing » Noahs Classifieds » Version: 1.3
cpe:2.3:a:phpoutsourcing:noahs_classifieds:1.3:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-0882

EPSS FAQ

3.62%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0882

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2006-0882

Jump to

Vulnerability Details : CVE-2006-0882

Products affected by CVE-2006-0882

Exploit prediction scoring system (EPSS) score for CVE-2006-0882

CVSS scores for CVE-2006-0882

References for CVE-2006-0882