CVE-2006-4938

{"id": "CVE-2006-4938", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-09-23T00:07:00.000", "references": [{"url": "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2", "source": "cve@mitre.org"}, {"url": "http://docs.moodle.org/en/Release_notes#Moodle_1.6.2", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message."}, {"lang": "es", "value": "help.php en Moodle before 1.6.2 no valida la existencia de ciertos ficheros de ayuda antes de incluirlos, lo cual permitir\u00eda a usuarios remotos validados obtener la ruta en un mensaje de error."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F20C403-413B-4474-8E4A-B6E0845F493C", "versionEndIncluding": "1.6.1"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "680CE396-5F61-409C-A152-4D1E1CB44EA3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}