CVE-2006-6755 - Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim_api.php, which reveals the path in an error message

Back Back to CVE browser

MEDIUM

Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim_api.php, which reveals the path in an error message

Published Dec 27, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 2.67%

Description

Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim_api.php, which reveals the path in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://acid-root.new.fr/poc/16061221.txt
x_refsource_MISCExploit
http://securityreason.com/securityalert/2073
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/455084/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6738
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31144
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2975
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://acid-root.new.fr/poc/16061221.txt		x_refsource_MISCExploit
http://securityreason.com/securityalert/2073		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/455084/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6738		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31144		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2975		exploitx_refsource_EXPLOIT-DB