CVE-2006-6744 phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write directories, which might allow remote attackers to list direct...
LowCVSS 2.1
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpprofiles | = 2.1.0 | No fix listed |
References
- sourceforge.net patch