CVE-2006-3836

Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.50% chance of exploitation in the next 30 days, 88th percentile

Published

2006-07-25

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28255

References

• CVE Record
• NVD entry

Related

• CVE-2006-3835
• CVE-2006-3838
• CVE-2006-3832
• CVE-2006-3843
• CVE-2006-3831
• CVE-2006-3845