CVE-2006-3936

{"id": "CVE-2006-3936", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-07-31T22:04:00.000", "references": [{"url": "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/21193", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/1302", "source": "cve@mitre.org"}, {"url": "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.opencms.org/opencms/en/shownews.html?id=1002", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/441182/100/0/threaded", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28001", "source": "cve@mitre.org"}, {"url": "http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/21193", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securityreason.com/securityalert/1302", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.opencms.org/opencms/en/shownews.html?id=1002", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/441182/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28001", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp."}, {"lang": "es", "value": "system/workplace/editors/editor.jsp en Alkacon OpenCms anterior a 6.2.2 permite a usuarios remotos autenticados leer el c\u00f3digo fuente de ficheros JSP de su elecci\u00f3n especificando el fichero en el par\u00e1metro resource, como ha sido demostrado usando index.jsp."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alkacon:opencms:6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8369451E-7C00-4CC3-9B80-871559E3F59E"}, {"criteria": "cpe:2.3:a:alkacon:opencms:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD4F9A11-BF2F-4C12-AE12-480EE547DD8D"}, {"criteria": "cpe:2.3:a:alkacon:opencms:6.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35A4931F-1EA7-48E5-B369-FA013FB87D12"}, {"criteria": "cpe:2.3:a:alkacon:opencms:6.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72D23BDD-8C14-44B4-83C3-26F4F35526A1"}, {"criteria": "cpe:2.3:a:alkacon:opencms:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16F73D28-272C-4271-BDA1-ACCFA3F8EEDB"}, {"criteria": "cpe:2.3:a:alkacon:opencms:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A26A8441-4BB4-423A-99D7-79D2537A91DD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}