Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2006-6104

EPSS 15.02% · P95
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-6104

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) to a URI, and (2) read credentials via a request for Web.Config%20.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Mono XSP mod_mono模块目录遍历和源码信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mono XSP是Mono框架下所提供的轻量级WEB服务器。 Mono/C# Web服务器xsp组件的mod_mono模块存在目录遍历漏洞，远程攻击者可以利用此漏洞获取服务器相关的敏感信息。如果攻击者能够在HTTP请求后附带%20(空格字符)的话，就会导致在返回结果中包含服务端应用程序的源码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-6104

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-6104

请登录查看更多情报信息。

Same Patch Batch · n/a · 2006-12-21 · 29 CVEs total

CVE-2006-6680Pedro Lineu Orso chetcpasswd 'chetcpasswd.allow'敏感信息泄露漏洞
CVE-2006-6678Netrik Textarea 'form-file.c' 任意命令执行漏洞
CVE-2006-6677NOD32 Anti-Virus .CHM文件计算错误漏洞
CVE-2006-6676NOD32 Anti-Virus多个文件解析安全漏洞
CVE-2006-6675Novell NetWare Welcome Web-App未明跨站脚本攻击漏洞
CVE-2006-6674Ozeki HTTP-SMS Gateway密码信息泄露漏洞
CVE-2006-6673WinFtp Server 长命令拒绝服务攻击
CVE-2006-6672Burak Yylmaz Download Portal SQL注入漏洞
CVE-2006-6671Burak Yilmaz Download Portal 'Down.ASP' SQL注入漏洞
CVE-2006-6685Pedro Lineu Orso chetcpasswd 栈缓冲区溢出漏洞
CVE-2006-6684Pedro Lineu Orso chetcpasswd HTTP报头缓冲区错误漏洞
CVE-2006-6683Chetcpasswd '/etc/shadow' 安全绕过漏洞
CVE-2006-6682Pedro Lineu Orso chetcpasswd 无效用户名请求安全信息泄露漏洞
CVE-2006-6681Pedro Lineu Orso chetcpasswd 密码暴力破解漏洞
CVE-2006-6686TextSend 'Sender.PHP'远程文件包含漏洞
CVE-2006-6679Pedro Lineu Orso chetcpasswd X-Forwarded-For HTTP报头欺骗未授权访问漏洞
CVE-2002-2221Chetcpasswd本地特权提升漏洞
CVE-2002-2220Pedro Lineu Orso chetcpasswd缓冲区溢出漏洞
CVE-2002-2219Chpasswd可远程访问敏感文件漏洞
CVE-2006-6695Carsen Klock TextSend 'index.php'多个跨站脚本攻击漏洞

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-6104

No comments yet

Leave a comment