Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2006-3290

Description

HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.

POC

Reference

- http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Github

No PoCs found on GitHub currently.