VulnerabilityModified
CVE-2006-0508
Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory.
MEDIUM 5.0EPSS 1.39%
Does this matter?
Lower severity and a low EPSS score (1.39%). Track it; it rarely justifies an emergency change on its own.
Description
Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.39% probability · 71th percentile
- CISA KEV
- Not listed
- Affected
- easy cms/easy cms
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/18673Vendor Advisory
- http://www.securityfocus.com/archive/1/423442/100/0/threaded
- http://www.securityfocus.com/archive/1/424431/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24373
- http://secunia.com/advisories/18673Vendor Advisory
- http://www.securityfocus.com/archive/1/423442/100/0/threaded
- http://www.securityfocus.com/archive/1/424431/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24373
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.