Cahier De Textes
Approved changes feed: RSS · Atom
cpe:2.3:a:cahier_de_textes:cahier_de_textes:2.0:*:*:*:*:*:*:*part: a version: 2.0 update: *
| Vendor | Cahier De Textes (9ead87a6-65fc-57ca-82b9-4e29f0f1c064) |
|---|---|
| Product | Cahier De Textes (99bc1e2b-469d-57bc-91d8-9e357989a0e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-6254 |
vulnerable | 2026-06-08 04:49:22.389526 |
Details available
administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conn_cahier_de_texte.php. NOTE: it is not clear whether the scope of this issue extends above the web document root, and whether directory traversal is the primary vulnerability.
Published: 2006-12-04T11:00:00.000Z
Updated: 2024-08-07T20:19:35.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6253 |
vulnerable | 2026-06-08 04:49:22.387897 |
Details available
Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql.
Published: 2006-12-04T11:00:00.000Z
Updated: 2024-08-07T20:19:35.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5221 |
vulnerable | 2026-06-08 04:49:20.082910 |
Details available
Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php.
Published: 2006-10-10T21:00:00.000Z
Updated: 2024-08-07T19:41:05.760Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.