CVE-2006-3836

Published: Jul 25, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter.

Affected (1)

Products: Unidomedia: Chameleon Le

Unidomedia

1 product

Chameleon Le

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Unidomedia Chameleon Le	version ≤ 1.203

References (12)

http://secunia.com/advisories/21156

Source: cve@mitre.org

http://securityreason.com/securityalert/1280

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440765/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19107

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/2948

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27898

Source: cve@mitre.org

http://secunia.com/advisories/21156