CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2006-4766

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0420%
EPSS Percentile27.36th
Published2006年9月13日
Last Modified2026年4月16日

Vulnerability Description

Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers to read arbitrary files via a .. (dot dot) in the ide parameter.

Affected Platforms (CPE)

📦
Stefan Ernst

Newsscript

= 0.5_beta

References & Advisories

🔗 http://secunia.com/advisories/21826
🔗 http://securityreason.com/securityalert/1574
🔗 http://www.osvdb.org/28811
🔗 http://www.securityfocus.com/archive/1/445818/100/0/threaded
🔗 http://www.vupen.com/english/advisories/2006/3558
🔗 http://secunia.com/advisories/21826
🔗 http://securityreason.com/securityalert/1574
🔗 http://www.osvdb.org/28811

相關漏洞威脅

CVE-2005-073510.0

newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.

CVE-2006-46667.5

Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to exe...

CVE-2009-42627.5

Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to...

CVE-2006-47676.4

Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to (1) read a...