CVE-2006-6257 | BDVDB-2026-20664 Detail

Description#

The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/452988/100/0/threaded
http://www.securityfocus.com/bid/21355
http://securityreason.com/securityalert/1965
http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt
http://secunia.com/advisories/23144
http://www.vupen.com/english/advisories/2006/4851

Exploit#

No public exploit known

History#

Version 12006-12-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.