VulnerabilityModified
CVE-2006-3836
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.
MEDIUM 5.0EPSS 3.50%
Does this matter?
Lower severity and a low EPSS score (3.50%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.50% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- unidomedia/chameleon le
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21156
- http://securityreason.com/securityalert/1280
- http://www.securityfocus.com/archive/1/440765/100/0/threaded
- http://www.securityfocus.com/bid/19107Exploit
- http://www.vupen.com/english/advisories/2006/2948
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27898
- http://secunia.com/advisories/21156
- http://securityreason.com/securityalert/1280
- http://www.securityfocus.com/archive/1/440765/100/0/threaded
- http://www.securityfocus.com/bid/19107Exploit
- http://www.vupen.com/english/advisories/2006/2948
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27898
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.