CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It may be remotely exploitable.
CVE
CVE-2006-2690
Severity
HIGH
CVSS
7.8
EPSS
1.50%
Original NVD Description
An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters.