CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2894

Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.067

EPSS Ranking 90.7%

CVSS Severity

CVSS v2 Score 4.0

References

Products affected by CVE-2006-2894

Mozilla » Firefox » Version: N/A

cpe:2.3:a:mozilla:firefox:-
Mozilla » Firefox » Version: 0.1

cpe:2.3:a:mozilla:firefox:0.1
Mozilla » Firefox » Version: 0.10

cpe:2.3:a:mozilla:firefox:0.10
Mozilla » Firefox » Version: 0.10.1

cpe:2.3:a:mozilla:firefox:0.10.1
Mozilla » Firefox » Version: 0.2

cpe:2.3:a:mozilla:firefox:0.2
Mozilla » Firefox » Version: 0.3

cpe:2.3:a:mozilla:firefox:0.3
Mozilla » Firefox » Version: 0.4

cpe:2.3:a:mozilla:firefox:0.4
Mozilla » Firefox » Version: 0.5

cpe:2.3:a:mozilla:firefox:0.5
Mozilla » Firefox » Version: 0.6

cpe:2.3:a:mozilla:firefox:0.6
Mozilla » Firefox » Version: 0.6.1

cpe:2.3:a:mozilla:firefox:0.6.1
Mozilla » Firefox » Version: 0.7

cpe:2.3:a:mozilla:firefox:0.7
Mozilla » Firefox » Version: 0.7.1

cpe:2.3:a:mozilla:firefox:0.7.1
Mozilla » Firefox » Version: 0.8

cpe:2.3:a:mozilla:firefox:0.8
Mozilla » Firefox » Version: 0.9

cpe:2.3:a:mozilla:firefox:0.9
Mozilla » Firefox » Version: 0.9.1

cpe:2.3:a:mozilla:firefox:0.9.1
Mozilla » Firefox » Version: 0.9.2

cpe:2.3:a:mozilla:firefox:0.9.2
Mozilla » Firefox » Version: 0.9.3

cpe:2.3:a:mozilla:firefox:0.9.3
Mozilla » Firefox » Version: 1.0

cpe:2.3:a:mozilla:firefox:1.0
Mozilla » Firefox » Version: 1.0.1

cpe:2.3:a:mozilla:firefox:1.0.1
Mozilla » Firefox » Version: 1.0.2

cpe:2.3:a:mozilla:firefox:1.0.2
Mozilla » Firefox » Version: 1.0.3

cpe:2.3:a:mozilla:firefox:1.0.3
Mozilla » Firefox » Version: 1.0.4

cpe:2.3:a:mozilla:firefox:1.0.4
Mozilla » Firefox » Version: 1.0.5

cpe:2.3:a:mozilla:firefox:1.0.5
Mozilla » Firefox » Version: 1.0.6

cpe:2.3:a:mozilla:firefox:1.0.6
Mozilla » Firefox » Version: 1.0.7

cpe:2.3:a:mozilla:firefox:1.0.7
Mozilla » Firefox » Version: 1.0.8

cpe:2.3:a:mozilla:firefox:1.0.8
Mozilla » Firefox » Version: 1.4.1

cpe:2.3:a:mozilla:firefox:1.4.1
Mozilla » Firefox » Version: 1.5

cpe:2.3:a:mozilla:firefox:1.5
Mozilla » Firefox » Version: 1.5.0.1

cpe:2.3:a:mozilla:firefox:1.5.0.1
Mozilla » Firefox » Version: 1.5.0.10

cpe:2.3:a:mozilla:firefox:1.5.0.10
Mozilla » Firefox » Version: 1.5.0.11

cpe:2.3:a:mozilla:firefox:1.5.0.11
Mozilla » Firefox » Version: 1.5.0.12

cpe:2.3:a:mozilla:firefox:1.5.0.12
Mozilla » Firefox » Version: 1.5.0.2

cpe:2.3:a:mozilla:firefox:1.5.0.2
Mozilla » Firefox » Version: 1.5.0.3

cpe:2.3:a:mozilla:firefox:1.5.0.3
Mozilla » Firefox » Version: 1.5.0.4

cpe:2.3:a:mozilla:firefox:1.5.0.4
Mozilla » Firefox » Version: 1.5.0.5

cpe:2.3:a:mozilla:firefox:1.5.0.5
Mozilla » Firefox » Version: 1.5.0.6

cpe:2.3:a:mozilla:firefox:1.5.0.6
Mozilla » Firefox » Version: 1.5.0.7

cpe:2.3:a:mozilla:firefox:1.5.0.7
Mozilla » Firefox » Version: 1.5.0.8

cpe:2.3:a:mozilla:firefox:1.5.0.8
Mozilla » Firefox » Version: 1.5.0.9

cpe:2.3:a:mozilla:firefox:1.5.0.9
Mozilla » Firefox » Version: 1.5.1

cpe:2.3:a:mozilla:firefox:1.5.1
Mozilla » Firefox » Version: 1.5.2

cpe:2.3:a:mozilla:firefox:1.5.2
Mozilla » Firefox » Version: 1.5.3

cpe:2.3:a:mozilla:firefox:1.5.3
Mozilla » Firefox » Version: 1.5.4

cpe:2.3:a:mozilla:firefox:1.5.4
Mozilla » Firefox » Version: 1.5.5

cpe:2.3:a:mozilla:firefox:1.5.5
Mozilla » Firefox » Version: 1.5.6

cpe:2.3:a:mozilla:firefox:1.5.6
Mozilla » Firefox » Version: 1.5.7

cpe:2.3:a:mozilla:firefox:1.5.7
Mozilla » Firefox » Version: 1.5.8

cpe:2.3:a:mozilla:firefox:1.5.8
Mozilla » Firefox » Version: 1.8

cpe:2.3:a:mozilla:firefox:1.8
Mozilla » Firefox » Version: 2.0

cpe:2.3:a:mozilla:firefox:2.0
Mozilla » Firefox » Version: 2.0.0.1

cpe:2.3:a:mozilla:firefox:2.0.0.1
Mozilla » Firefox » Version: 2.0.0.2

cpe:2.3:a:mozilla:firefox:2.0.0.2
Mozilla » Firefox » Version: 2.0.0.3

cpe:2.3:a:mozilla:firefox:2.0.0.3
Mozilla » Firefox » Version: 2.0.0.4

cpe:2.3:a:mozilla:firefox:2.0.0.4
Mozilla » Firefox » Version: 2.0.0.5

cpe:2.3:a:mozilla:firefox:2.0.0.5
Mozilla » Firefox » Version: 2.0.0.6

cpe:2.3:a:mozilla:firefox:2.0.0.6
Mozilla » Firefox » Version: 2.0.0.7

cpe:2.3:a:mozilla:firefox:2.0.0.7
Mozilla » Firefox » Version: 2.0.0.8

cpe:2.3:a:mozilla:firefox:2.0.0.8
Mozilla » Mozilla Suite » Version: 1.7.13

cpe:2.3:a:mozilla:mozilla_suite:1.7.13
Mozilla » Seamonkey » Version: N/A

cpe:2.3:a:mozilla:seamonkey:-
Mozilla » Seamonkey » Version: 1.0

cpe:2.3:a:mozilla:seamonkey:1.0
Mozilla » Seamonkey » Version: 1.0.1

cpe:2.3:a:mozilla:seamonkey:1.0.1
Mozilla » Seamonkey » Version: 1.0.2

cpe:2.3:a:mozilla:seamonkey:1.0.2
Mozilla » Seamonkey » Version: 1.0.3

cpe:2.3:a:mozilla:seamonkey:1.0.3
Mozilla » Seamonkey » Version: 1.0.4

cpe:2.3:a:mozilla:seamonkey:1.0.4
Mozilla » Seamonkey » Version: 1.0.5

cpe:2.3:a:mozilla:seamonkey:1.0.5
Mozilla » Seamonkey » Version: 1.0.6

cpe:2.3:a:mozilla:seamonkey:1.0.6
Mozilla » Seamonkey » Version: 1.0.7

cpe:2.3:a:mozilla:seamonkey:1.0.7
Mozilla » Seamonkey » Version: 1.0.8

cpe:2.3:a:mozilla:seamonkey:1.0.8
Mozilla » Seamonkey » Version: 1.0.9

cpe:2.3:a:mozilla:seamonkey:1.0.9
Mozilla » Seamonkey » Version: 1.1

cpe:2.3:a:mozilla:seamonkey:1.1
Mozilla » Seamonkey » Version: 1.1.1

cpe:2.3:a:mozilla:seamonkey:1.1.1
Mozilla » Seamonkey » Version: 1.1.2

cpe:2.3:a:mozilla:seamonkey:1.1.2
Mozilla » Seamonkey » Version: 1.1.3

cpe:2.3:a:mozilla:seamonkey:1.1.3
Mozilla » Seamonkey » Version: 1.1.4

cpe:2.3:a:mozilla:seamonkey:1.1.4
Netscape » Navigator » Version: N/A

cpe:2.3:a:netscape:navigator:-
Netscape » Navigator » Version: 2.02

cpe:2.3:a:netscape:navigator:2.02
Netscape » Navigator » Version: 4.0

cpe:2.3:a:netscape:navigator:4.0
Netscape » Navigator » Version: 4.01

cpe:2.3:a:netscape:navigator:4.01
Netscape » Navigator » Version: 4.02

cpe:2.3:a:netscape:navigator:4.02
Netscape » Navigator » Version: 4.03

cpe:2.3:a:netscape:navigator:4.03
Netscape » Navigator » Version: 4.04

cpe:2.3:a:netscape:navigator:4.04
Netscape » Navigator » Version: 4.05

cpe:2.3:a:netscape:navigator:4.05
Netscape » Navigator » Version: 4.06

cpe:2.3:a:netscape:navigator:4.06
Netscape » Navigator » Version: 4.07

cpe:2.3:a:netscape:navigator:4.07
Netscape » Navigator » Version: 4.08

cpe:2.3:a:netscape:navigator:4.08
Netscape » Navigator » Version: 4.5

cpe:2.3:a:netscape:navigator:4.5
Netscape » Navigator » Version: 4.61

cpe:2.3:a:netscape:navigator:4.61
Netscape » Navigator » Version: 4.7

cpe:2.3:a:netscape:navigator:4.7
Netscape » Navigator » Version: 4.75

cpe:2.3:a:netscape:navigator:4.75
Netscape » Navigator » Version: 4.77

cpe:2.3:a:netscape:navigator:4.77
Netscape » Navigator » Version: 6.0

cpe:2.3:a:netscape:navigator:6.0
Netscape » Navigator » Version: 6.01

cpe:2.3:a:netscape:navigator:6.01
Netscape » Navigator » Version: 6.1

cpe:2.3:a:netscape:navigator:6.1
Netscape » Navigator » Version: 6.2

cpe:2.3:a:netscape:navigator:6.2
Netscape » Navigator » Version: 6.2.1

cpe:2.3:a:netscape:navigator:6.2.1
Netscape » Navigator » Version: 6.2.2

cpe:2.3:a:netscape:navigator:6.2.2
Netscape » Navigator » Version: 6.2.3

cpe:2.3:a:netscape:navigator:6.2.3
Netscape » Navigator » Version: 7.0

cpe:2.3:a:netscape:navigator:7.0
Netscape » Navigator » Version: 7.0.2

cpe:2.3:a:netscape:navigator:7.0.2
Netscape » Navigator » Version: 7.02

cpe:2.3:a:netscape:navigator:7.02
Netscape » Navigator » Version: 7.1

cpe:2.3:a:netscape:navigator:7.1
Netscape » Navigator » Version: 7.2

cpe:2.3:a:netscape:navigator:7.2
Netscape » Navigator » Version: 8.0.3.3

cpe:2.3:a:netscape:navigator:8.0.3.3
Netscape » Navigator » Version: 8.0.3.4

cpe:2.3:a:netscape:navigator:8.0.3.4
Netscape » Navigator » Version: 8.0.40

cpe:2.3:a:netscape:navigator:8.0.40
Netscape » Navigator » Version: 8.1

cpe:2.3:a:netscape:navigator:8.1
Netscape » Navigator » Version: _navigator

cpe:2.3:a:netscape:navigator:_navigator

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-2894

Products

Pricing

Contact Us