Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2006-3194

Published: Jun 23, 2006 | Modified: Oct 18, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2006-3194
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.

Affected Software

Name Vendor Start Version End Version
Singapore Singapore 0.9.1_beta 0.9.1_beta
Singapore Singapore 0.9.2_beta 0.9.2_beta
Singapore Singapore 0.9.3_beta 0.9.3_beta
Singapore Singapore 0.9.4_beta 0.9.4_beta
Singapore Singapore 0.9.5_beta 0.9.5_beta
Singapore Singapore 0.9.6_beta 0.9.6_beta
Singapore Singapore 0.9.7 0.9.7
Singapore Singapore 0.9.7_beta 0.9.7_beta
Singapore Singapore 0.9.8_beta 0.9.8_beta
Singapore Singapore 0.9.9a_beta 0.9.9a_beta
Singapore Singapore 0.9.9b_beta 0.9.9b_beta
Singapore Singapore 0.9.10 0.9.10
Singapore Singapore 0.9.10_beta 0.9.10_beta
Singapore Singapore 0.9.11_beta 0.9.11_beta
Singapore Singapore 0.9_beta 0.9_beta
Singapore Singapore 0.9a_beta 0.9a_beta
Singapore Singapore 0.10.0 0.10.0

References

Aqua SaaS Plans
The fastest track to get started with Aqua
Start Now
Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2022 Aqua Security Software Ltd.   Privacy Policy | Terms of Use