VulnerabilityModified
CVE-2006-0882
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php.
MEDIUM 5.0EPSS 2.82%
Does this matter?
Lower severity and a low EPSS score (2.82%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.82% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- phpoutsourcing/noahs classifieds
- Source
- cve@mitre.org
References
- http://securitytracker.com/id?1015667
- http://www.kapda.ir/advisory-268.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/425783/100/0/threaded
- http://www.securityfocus.com/bid/16778Exploit
- http://www.vupen.com/english/advisories/2006/0703
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24900
- http://securitytracker.com/id?1015667
- http://www.kapda.ir/advisory-268.htmlExploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/425783/100/0/threaded
- http://www.securityfocus.com/bid/16778Exploit
- http://www.vupen.com/english/advisories/2006/0703
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24900
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.