VulnerabilityModified

CVE-2006-6138

Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter.

MEDIUM 5.0EPSS 2.78%

Does this matter?

Lower severity and a low EPSS score (2.78%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 2.78% probability · 86th percentile
CISA KEV: Not listed
Affected: sisfo kampus/sisfo kampus
Source: cve@mitre.org

References

http://www.securityfocus.com/bid/21294Exploit
https://www.exploit-db.com/exploits/2847
http://www.securityfocus.com/bid/21294Exploit
https://www.exploit-db.com/exploits/2847

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.