CVE-2006-6886

phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-userroot.inc.php or (2)…

published January 5, 2007

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-userroot.inc.php or (2) files.private.additions.inc.php in include/inc_lib/, which reveals the path in various error messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01629 · 76.0th percentile
Published
2007-01-05T11:00Z
EPSS history
Timeline
  • 05 JAN 11:00Z
    phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for (1) files.public-userroot.inc.php or (2)…
    cvelistv5