CVEvulnerability
CVE-2006-6257
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-12-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message.
Affected configurations
• alternc alternc (<= 0.9.5)
References
- http://secunia.com/advisories/23144 secunia.com
- http://securityreason.com/securityalert/1965 securityreason.com
- http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/452988/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21355 Exploit
- http://www.vupen.com/english/advisories/2006/4851 www.vupen.com
- http://secunia.com/advisories/23144 secunia.com
- http://securityreason.com/securityalert/1965 securityreason.com
- http://www.ground418.org/exploits/read.php?file=06-alternC-095.txt Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/452988/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21355 Exploit
- http://www.vupen.com/english/advisories/2006/4851 www.vupen.com