CVE-2006-2552

Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an…

published May 24, 2006

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an error message. NOTE: this was originally claimed to be SQL injection, but it is probably resultant from another issue in functions.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01459 · 73.3th percentile
Published
2006-05-24T01:00Z
EPSS history
Timeline
  • 24 MAY 01:00Z
    Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an…
    cvelistv5