CVE-2006-3938

{"id": "CVE-2006-3938", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-31T22:04:00.000", "references": [{"url": "http://securityreason.com/securityalert/1307", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29812", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29813", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29814", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29815", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29816", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29817", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29818", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29820", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29821", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29822", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29823", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29824", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29825", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29826", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29827", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29828", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29829", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29830", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/29831", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/440874/100/100/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/459820/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://zone14.free.fr/advisories/8/", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27913", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.php, (3) edit_link.php in ecrire/tools/blogroll/; (4) syslog/index.php, (5) thememng/index.php, (6) toolsmng/index.php, (7) utf8convert/index.php in /ecrire/tools/; (8) /ecrire/inc/connexion.php and (9) /inc/session.php; (10) class.blog.php, (11) class.blogcomment.php, (12) and class.blogpost.php in /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, and (16) class.xblogpost.php in /layout/; (17) form.php, (18) list.php, (19) post.php, or (20) template.php in /themes/default/, which reveal the installation path in error messages."}, {"lang": "es", "value": "DotClear permite a atacantes remotos obtener informaci\u00f3n confidencial mediante una petici\u00f3n directa de (1) edit_cat.php, (2) index.php, (3) edit_link.php en ecrire/tools/blogroll/; (4) syslog/index.php, (5) thememng/index.php, (6) toolsmng/index.php, (7) utf8convert/index.php en /ecrire/tools/; (8) /ecrire/inc/connexion.php y (9) /inc/session.php; (10) class.blog.php, (11) class.blogcomment.php, (12) y class.blogpost.php en /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, y (16) class.xblogpost.php en /layout/; (17) form.php, (18) list.php, (19) post.php, or (20) template.php in /themes/default/, que revela la ruta de instalaci\u00f3n en mensajes de error."}], "lastModified": "2018-10-17T21:32:26.643", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dotclear:dotclear:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94896556-5D43-4C54-A49C-301511B69EB4"}, {"criteria": "cpe:2.3:a:dotclear:dotclear:1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE7B92DB-62E4-4F4F-BC57-2C5F646C13CD"}, {"criteria": "cpe:2.3:a:dotclear:dotclear:1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49EEF727-A23D-47AE-BE4E-238290246BE5"}, {"criteria": "cpe:2.3:a:dotclear:dotclear:1.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "860F6A6A-717B-4B94-B4D0-26C2BAC1E66D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}