Vulnerability in Phpprofiles
CVE-2006-6744
phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts.
EPSS: 0.005 (37.6th percentile) — read the EPSS interpretation.
Affected products
- Phpprofiles — versions 2.1.0
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)