CVEvulnerability
CVE-2010-3606
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) folder and (2) action parameters.
Affected configurations
• netartmedia real estate portal 2.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/68062 osvdb.org
- http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html pridels-team.blogspot.com
- http://secunia.com/advisories/41377 Vendor Advisory
- http://www.securityfocus.com/bid/43266 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61867 exchange.xforce.ibmcloud.com
- http://osvdb.org/68062 osvdb.org
- http://pridels-team.blogspot.com/2010/09/netartmedia-real-estate-portal-v20-xss.html pridels-team.blogspot.com
- http://secunia.com/advisories/41377 Vendor Advisory
- http://www.securityfocus.com/bid/43266 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61867 exchange.xforce.ibmcloud.com