Vulnerability Details CVE-2006-2475
Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 74.5%
CVSS Severity
CVSS v2 Score 7.8
References
- http://secunia.com/advisories/20177
- http://securityreason.com/securityalert/919
- http://www.osvdb.org/25647
- http://www.osvdb.org/25648
- http://www.securityfocus.com/archive/1/434368/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26533
- http://secunia.com/advisories/20177
- http://securityreason.com/securityalert/919
- http://www.osvdb.org/25647
- http://www.osvdb.org/25648
- http://www.securityfocus.com/archive/1/434368/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26533