« Volver al listado

CVE-2006-6175

Estado: ModificadaAlta (7.5)—

Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Horde — Kronolith

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6175",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-30T16:28:00.000",
  "references": [
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=445",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=horde-announce&m=116483107007152&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=horde-announce&m=116483121211579&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23145",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/23780",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-200701-11.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017316",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21341",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4775",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=445",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=horde-announce&m=116483107007152&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=horde-announce&m=116483121211579&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23145",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23780",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-200701-11.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017316",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21341",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4775",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de escalado de directorio en lib/FBView.php del Horde Kronolith H3 en versiones anteriores a la 2.0.7 y en la 2.1.x anterior a la 2.1.4, permite a atacantes remotos ejecutar código y ficheros PHP de su elección mediante la secuencia .. (punto punto) en el parámetro view."
    }
  ],
  "lastModified": "2026-06-16T22:32:37.287",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "436D05EC-DAC5-458D-9B38-14F213CE727D"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41EA6145-A394-4AC9-A94A-3F28533704F9"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "302DB7DF-33F2-4C66-8792-8DFC25BBF5BA"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7A43538-F4FA-4AE3-9C8A-E949494695E1"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D2CA0AD-7DF6-43CA-B663-A7F79C456F1C"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "961A4D0A-3BC7-4ADB-8459-3F724E49BDA7"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CB15A30-FC06-4A29-AD40-8EAEE0C91C8A"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3488A4C1-5957-4592-A250-7EBD3121EECF"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6A39065-CAC3-4FE9-99DB-D25735D16730"
            },
            {
              "criteria": "cpe:2.3:a:horde:kronolith:2.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C682749-BC44-43DE-B85A-43EC9C3F58A7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}