VulnerabilityModified

CVE-2006-6139

Directory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the fn parameter.

MEDIUM 5.0EPSS 1.43%

Does this matter?

Lower severity and a low EPSS score (1.43%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the fn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 1.43% probability · 71th percentile
CISA KEV: Not listed
Affected: sisfo kampus/sisfo kampus
Source: cve@mitre.org

References

http://secunia.com/advisories/23109Vendor Advisory
http://www.vupen.com/english/advisories/2006/4723
http://secunia.com/advisories/23109Vendor Advisory
http://www.vupen.com/english/advisories/2006/4723

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.