CVE-2006-2950

Published: Jun 12, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) header.php, (2) contact.php, or (3) forum_extender.php, which reveals the path in an error message.

Affected (2)

Products: Npds: Npds

Npds

1 product

Npds

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Npds Npds	Up to 5.10
Npds Npds	Version 4.8

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://secunia.com/advisories/20523

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1076

Source: cve@mitre.org

http://www.acid-root.new.fr/advisories/npds510.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/26287

Source: cve@mitre.org

http://www.osvdb.org/26288

Source: cve@mitre.org

http://www.osvdb.org/26289

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436442/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2233

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/27124

Source: cve@mitre.org

http://secunia.com/advisories/20523