CVE-2006-2690

An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2006-05-31

Last modified

2024-08-07

Affected products

• Eva-web (Eva-web)

References

• http://pridels0.blogspot.com/2006/05/eva-web-212-vuln.html