CVE-2006-6886: Infoleak
Published Dec 31, 2006
·Updated
phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-userroot.inc.php or (2) files.private.additions.inc.php in include/inclib/, which reveals the path in various error messages.
Affected Software
1 affected component
Phpwcms Phpwcms=1.2.5_dev
Event History
Dec 31, 2006
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Jan 5, 2007
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6886?
CVE-2006-6886 is classified as a medium severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2006-6886?
To fix CVE-2006-6886, restrict direct access to sensitive files or upgrade to a patched version of phpwcms.
3
What type of attack does CVE-2006-6886 enable?
CVE-2006-6886 enables remote attackers to gain sensitive information through direct file access.
4
What files are affected by CVE-2006-6886?
CVE-2006-6886 specifically affects files.public-userroot.inc.php and files.private.additions.inc.php.
5
Which version of phpwcms is vulnerable to CVE-2006-6886?
CVE-2006-6886 affects phpwcms version 1.2.5-DEV.