CVE-2006-7080: Medium severity eXV2 Content Management System vulnerability
Published Feb 27, 2007
·Updated
Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files via ".." sequences in the oldavatar parameter.
Affected Software
1 affected component
eXV2 Content Management System<=2.0.4.3
Event History
Feb 27, 2007
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7080?
CVE-2006-7080 is considered a medium severity vulnerability due to its potential for unauthorized file deletion.
2
How do I fix CVE-2006-7080?
To fix CVE-2006-7080, update your exV2 content management system to version 2.0.4.4 or later.
3
What kind of attacks are possible with CVE-2006-7080?
CVE-2006-7080 allows remote attackers to exploit the vulnerability to delete arbitrary files from the server.
4
Which versions of exV2 are affected by CVE-2006-7080?
CVE-2006-7080 affects exV2 versions 2.0.4.3 and earlier.
5
What is the cause of CVE-2006-7080?
CVE-2006-7080 is caused by improper validation of the old_avatar parameter in the avatar upload feature, allowing directory traversal.