VulnerabilityModified
CVE-2006-4721
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a ..
MEDIUM 5.1EPSS 2.65%
Does this matter?
Lower severity and a low EPSS score (2.65%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 2.65% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- ccleague/pro sports cms
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21843Exploit, Vendor Advisory
- http://sn4k3.persiangig.com/Expl0it/CCleaguePro_V1.0.1RC1%20Directory%20Traversal%20Vulnerability.txt
- http://unkn0wn.awardspace.com/Blog/?p=46
- http://www.securityfocus.com/archive/1/463191/100/0/threaded
- http://www.securityfocus.com/archive/1/463217/100/0/threaded
- http://www.vupen.com/english/advisories/2006/3549
- https://www.exploit-db.com/exploits/2333
- http://secunia.com/advisories/21843Exploit, Vendor Advisory
- http://sn4k3.persiangig.com/Expl0it/CCleaguePro_V1.0.1RC1%20Directory%20Traversal%20Vulnerability.txt
- http://unkn0wn.awardspace.com/Blog/?p=46
- http://www.securityfocus.com/archive/1/463191/100/0/threaded
- http://www.securityfocus.com/archive/1/463217/100/0/threaded
- http://www.vupen.com/english/advisories/2006/3549
- https://www.exploit-db.com/exploits/2333
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.