← Back

Sherzod Ruzmetov

sherzod_ruzmetov

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Cgi Session
cgi_session
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1280
1Sherzod Ruzmetov
1Cgi Session
Apr 16, 2026
Mar 19, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_file, which allows local users to obtain privileged information, such as session keys, by viewing the...Show more
CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_file, which allows local users to obtain privileged information, such as session keys, by viewing the files.Show less
CVE-2006-1279
1Sherzod Ruzmetov
1Cgi Session
Apr 16, 2026
Mar 19, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite.