Unscored severity · published Jun 3, 2006
CVE-2006-2791
Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via ".." sequences in the function…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via ".." sequences in the function parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Iboutique.mall · Net Art Media
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2791
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2791
securityreason.com
http://securityreason.com/securityalert/1023
www.securityfocus.com
http://www.securityfocus.com/archive/1/435164/100/0/threaded
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/26739