VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 6, 2006· Updated Jun 16, 2026

CVE-2006-5759

CVE-2006-5759

Description

index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty (1) rns[] or (2) pag[] arguments, which reveals the path in an error message.

Affected products

3
  • Rhadrix/If CMS3 versions
    cpe:2.3:a:rhadrix:if-cms:1.01:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:rhadrix:if-cms:1.01:*:*:*:*:*:*:*
    • cpe:2.3:a:rhadrix:if-cms:2.07:*:*:*:*:*:*:*
    • (no CPE)range: 1.01, 2.07

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.