Back to Database
Status published
Medium
CVE-2006-6257
The file manager in AlternC 0.9.5 and earlier, when warnings...
Vulnerability Description
The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6257
Credits & Attribution
No credits recorded in the NVD database.
References
More from alternc
View All →CVE-2006-6259
Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php...
Critical
10
CVE-2006-6258
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the...
Critical
9.3
CVE-2006-6256
Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php...
Medium
6.8
Affected Vendor
alternc
View all reports →Affected Software
alternc
Vulnerable Versions:
0
Timeline
Official Publish:
December 4th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.