CVE-2006-3274 : Directory traversal vulnerability in Webmin before 1.280, when run on Windows, a

Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ (backslash) characters in the URL to certain directories under the web root, such as the image directory.

Published 2006-06-28 22:05:00

Updated 2018-10-18 16:46:33

Source MITRE

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2006-3274

Webmin » Webmin
Versions up to, including, (<=) 1.2.70
cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*
Matching versions
Webmin » Webmin » Version: 1.2.40
cpe:2.3:a:webmin:webmin:1.2.40:*:*:*:*:*:*:*
Matching versions
Webmin » Webmin » Version: 1.2.50
cpe:2.3:a:webmin:webmin:1.2.50:*:*:*:*:*:*:*
Matching versions
Webmin » Webmin » Version: 1.2.30
cpe:2.3:a:webmin:webmin:1.2.30:*:*:*:*:*:*:*
Matching versions
Webmin » Webmin » Version: 1.2.60
cpe:2.3:a:webmin:webmin:1.2.60:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-3274

EPSS FAQ

0.95%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 81 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-3274

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2006-3274

Jump to

Vulnerability Details : CVE-2006-3274

Products affected by CVE-2006-3274

Exploit prediction scoring system (EPSS) score for CVE-2006-3274

CVSS scores for CVE-2006-3274

References for CVE-2006-3274