{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-11-27T00:00:00", "descriptions": [{"lang": "en", "value": "REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "remlab-calculate-path-disclosure(30538)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30538"}, {"name": "1911", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1911"}, {"name": "20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050879.html"}, {"name": "20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/453020/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://netvigilance.com/advisory0007"}, {"name": "30264", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30264"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-5896", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "remlab-calculate-path-disclosure(30538)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30538"}, {"name": "1911", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1911"}, {"name": "20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability", "refsource": "FULLDISC", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050879.html"}, {"name": "20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/453020/100/0/threaded"}, {"name": "http://netvigilance.com/advisory0007", "refsource": "MISC", "url": "http://netvigilance.com/advisory0007"}, {"name": "30264", "refsource": "OSVDB", "url": "http://www.osvdb.org/30264"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:04:55.931Z"}, "title": "CVE Program Container", "references": [{"name": "remlab-calculate-path-disclosure(30538)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30538"}, {"name": "1911", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1911"}, {"name": "20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050879.html"}, {"name": "20061127 REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/453020/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://netvigilance.com/advisory0007"}, {"name": "30264", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30264"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-5896", "datePublished": "2006-11-27T21:00:00", "dateReserved": "2006-11-14T00:00:00", "dateUpdated": "2024-08-07T20:04:55.931Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:remlab:web_mech_designer:2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "1F2ADFEB-4BF4-45C2-80EF-720D26B3A316", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message."}, {"lang": "es", "value": "REMLAB Web Mech Designer 2.0.5 permite a atacantes remotos obtener la ruta completa de la secuencia de comandos mediante un par\u00e1metro Tonnage incorrecto en calculate.php que provoca un error de divisi\u00f3n por cero, lo cual revela la ruta en un mensaje de error."}], "id": "CVE-2006-5896", "lastModified": "2018-10-17T21:45:50.107", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-11-27T21:07:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050879.html"}, {"source": "cve@mitre.org", "url": "http://netvigilance.com/advisory0007"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1911"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/30264"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/453020/100/0/threaded"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30538"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}