CVE-2006-3196

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://securityreason.com/securityalert/1135
http://www.securityfocus.com/archive/1/437716/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27323

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:singapore:singapore:0.9.1_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.2_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.3_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.4_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.5_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.6_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.7:::::::*
	cpe:2.3:a:singapore:singapore:0.9.7_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.8_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.9a_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.9b_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.10:::::::*
	cpe:2.3:a:singapore:singapore:0.9.10_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9.11_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.9a_beta:::::::*
	cpe:2.3:a:singapore:singapore:0.10.0:::::::*

History

No history.

Information

Published : 2006-06-23 00:02

Updated : 2024-02-28 10:42

NVD link : CVE-2006-3196

Mitre link : CVE-2006-3196

CVE.ORG link : CVE-2006-3196

JSON object : View

Products Affected

singapore

singapore

CWE

NVD-CWE-Other

{"id": "CVE-2006-3196", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-06-23T00:02:00.000", "references": [{"url": "http://securityreason.com/securityalert/1135", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/437716/100/0/threaded", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27323", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message."}, {"lang": "es", "value": "index.php en Singapore v0.10.0 y anteriores permite a atacantes remotos obtener la ruta de instalaci\u00f3n a trav\u00e9s de un par\u00e1metro de plantilla no v\u00e1lida, lo que revela la ruta en un mensaje de error."}], "lastModified": "2018-10-18T16:46:12.737", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:singapore:singapore:0.9.1_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0AC1508-0AC0-412C-A1D7-E5E822BE44C1"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.2_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACACF5FB-A2FD-4176-BE8C-28F71ECD2712"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.3_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B16CB109-13CC-4493-8DC9-0798252A241E"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.4_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8072C488-C0F3-47C4-AC07-325DB9E41D67"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.5_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A018C38A-F41A-4F93-93FA-3BA26ACB89DB"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.6_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0A045A4-A4EE-4972-98D2-268E89D5598B"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "238FF55F-E3DE-441E-A857-01A3256F5CC4"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.7_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE991696-4495-4EDF-8C77-C23F76F85D07"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.8_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6113F201-6A7C-483F-9856-1012F61CD2AC"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.9a_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A77681F-82C5-460E-BC61-0BF56C7DB547"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.9b_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47B599D0-F74C-43CD-ADED-132D64E534E8"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2148867-BF1B-4746-B6E7-EE1E4590A2F0"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.10_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02090A42-3240-4BC9-BAE6-809C1CB6E752"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9.11_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F44CBEE-07CF-4D4B-BD89-9816624D4451"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "970981E9-43DD-4434-9DFD-22B36C8D4386"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.9a_beta:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB034BEA-FE80-420A-8428-3DEE6BBA7323"}, {"criteria": "cpe:2.3:a:singapore:singapore:0.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3CBBBAF-5CC8-464C-907F-B452668106DA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}