CVEvulnerability
CVE-2006-0044
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary commands via unspecified vectors involving template files and the "handling of submitted form fields".
Affected configurations
• albatross albatross 1.00
• albatross albatross 1.01
• albatross albatross 1.10
• albatross albatross 1.20
• albatross albatross 1.30
• albatross albatross 1.32
References
- http://secunia.com/advisories/18457 Patch, Vendor Advisory
- http://secunia.com/advisories/18496 secunia.com
- http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz security.debian.org
- http://www.debian.org/security/2006/dsa-942 Patch, Vendor Advisory
- http://www.object-craft.com.au/projects/albatross/news.html www.object-craft.com.au
- http://www.osvdb.org/22451 www.osvdb.org
- http://www.securityfocus.com/bid/16252 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0196 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24130 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18457 Patch, Vendor Advisory
- http://secunia.com/advisories/18496 secunia.com
- http://security.debian.org/pool/updates/main/a/albatross/albatross_1.20-2.diff.gz security.debian.org
- http://www.debian.org/security/2006/dsa-942 Patch, Vendor Advisory
- http://www.object-craft.com.au/projects/albatross/news.html www.object-craft.com.au
- http://www.osvdb.org/22451 www.osvdb.org
- http://www.securityfocus.com/bid/16252 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0196 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24130 exchange.xforce.ibmcloud.com