CVE-2006-6254 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 2.9% (pctl 87)
Patch early
A public exploit exists.
Description
administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conn_cahier_de_texte.php. NOTE: it is not clear whether the scope of this issue extends above the web document root, and whether directory traversal is the primary vulnerability.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
| EPSS | 2.91% — more likely to be exploited than 87% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-12-04 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| cahier de textes | cahier de textes |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Cahier de texte 2.0 - Database Backup / Source Disclosure | 2006-11-24 |
References
- http://acid-root.new.fr/poc/15061124.txt
- http://secunia.com/advisories/23122
- http://securityreason.com/securityalert/1961
- http://www.securityfocus.com/archive/1/452600/100/0/threaded
- http://www.securityfocus.com/bid/21283
- http://www.vupen.com/english/advisories/2006/4701
- http://acid-root.new.fr/poc/15061124.txt
- http://secunia.com/advisories/23122
- http://securityreason.com/securityalert/1961
- http://www.securityfocus.com/archive/1/452600/100/0/threaded
- http://www.securityfocus.com/bid/21283
- http://www.vupen.com/english/advisories/2006/4701
→ the Explorer · watch your stack · NVD