CVE-2006-7035: High severity Super Link Exchange Script Super Link Exchange Script vulnerability
Published Feb 23, 2007
·Updated
Directory traversal vulnerability in makethumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter.
Affected Software
1 affected component
Super Link Exchange Script Super Link Exchange Script=1.0
Event History
Feb 23, 2007
CVE Published
03:28 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7035?
CVE-2006-7035 is classified as a medium severity vulnerability due to its directory traversal implications.
2
How do I fix CVE-2006-7035?
To fix CVE-2006-7035, validate and sanitize the 'imgpath' parameter to prevent directory traversal attacks.
3
What software is affected by CVE-2006-7035?
CVE-2006-7035 affects Super Link Exchange Script version 1.0.
4
What type of attack does CVE-2006-7035 enable?
CVE-2006-7035 enables remote attackers to read arbitrary files on the server through directory traversal.
5
Can CVE-2006-7035 lead to data exposure?
Yes, CVE-2006-7035 can lead to sensitive data exposure if attackers exploit the vulnerability successfully.