medium4.3
CVE-2006-6999
attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified id parameter.
Impact
attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Headstart Solutions | Deskpro | Versions 2.0.0, 2.0.1 |