CVE-2006-0700: ImageVue 0.16.1 - 'dir.php' Folder…

Record summary

CVE-2006-0700 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.

Description

imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits: 1

Proofs of concept

Catalogued exploits

ExploitDBImageVue 0.16.1 - 'dir.php' Folder Permission DisclosureExploitDB exploitby zjiebNot analyzed1 file

ExploitDB

PoC details

References

18802Third-party advisory

http://secunia.com/advisories/18802

20060211 imageVue16.1 upload vulnerabilitymailing list

http://www.securityfocus.com/archive/1/424745/30/0/threaded

16594vdb entry

http://www.securityfocus.com/bid/16594

ADV-2006-0570vdb entry

http://www.vupen.com/english/advisories/2006/0570

imagevue-multiple-information-disclosure(24641)vdb entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/24641

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2006-0700