Vulnerability Details CVE-2006-6849
administration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.039
EPSS Ranking 87.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://acid-root.new.fr/poc/17061224.txt
- http://www.securityfocus.com/archive/1/455299/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31132
- https://www.exploit-db.com/exploits/3016
- http://acid-root.new.fr/poc/17061224.txt
- http://www.securityfocus.com/archive/1/455299/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31132
- https://www.exploit-db.com/exploits/3016
Products affected by CVE-2006-6849
-
cpe:2.3:a:cahier_de_textes:cahier_de_textes:2.2