CVE-2006-1851

MEDIUM · CVSS 5 EPSS 1.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-04-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-1851

Severity

MEDIUM

CVSS

EPSS

1.38%

Original NVD Description

xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to members_only/index.cgi and (2) page parameter customer_area/index.cgi, probably due to invalid values.