CVE-2006-7154 Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in....
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in templates/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iono | <= 2.3 | No fix listed |
References
- 2386 third-party-advisory
- 32410 vdb-entry
- 32411 vdb-entry
- 32412 vdb-entry
- 20061012 Iono all version fullpath disclosure mailing-list
- iono-denied-index-information-disclosure(29505) vdb-entry