CVE-2006-5109

Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals…

published October 2, 2006

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages. NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, and cat_navi.php vectors are already covered by CVE-2005-0607.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01484 · 73.8th percentile
Published
2006-10-02T20:00Z
EPSS history
Timeline
  • 02 OCT 20:00Z
    Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals…
    cvelistv5