[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkQKQpRy8mX7SjrwHnYGf__VBTqn20bteV40bZInpkDM":3,"g5a-risk:CVE-2006-6104":220},{"success":4,"data":5,"meta":218},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":48,"references":49,"referencesCount":165,"weaknesses":166,"weaknessesCount":170,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":171,"seoMetadata":172,"configurations":197,"relatedVendorCves":209,"notableEvents":210},"CVE-2006-6104","What is CVE-2006-6104?","The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) to a URI, and (2) read credentials via a request for Web.Config%20.","The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) rea...","2006-12-21T19:28:00","2026-06-16T22:32:28.45",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"MEDIUM",10,2.9,false,[],0.05248,[34,34,34,34,34,34,34],"Medium",[38,43,46],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"mono","xsp","1.1","cpe:2.3:a:mono:xsp:1.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"1.2.1","cpe:2.3:a:mono:xsp:1.2.1:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":22,"criteria":47,"vulnerable":4},"cpe:2.3:a:mono:xsp:2.0:*:*:*:*:*:*:*",3,[50,54,57,61,68,71,74,77,80,83,86,90,94,98,102,106,110,113,117,121,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163],{"url":51,"source":52,"tags":53},"http:\u002F\u002Ffedoranews.org\u002Fcms\u002Fnode\u002F2400","Fedoranews",[],{"url":55,"source":52,"tags":56},"http:\u002F\u002Ffedoranews.org\u002Fcms\u002Fnode\u002F2401",[],{"url":58,"source":59,"tags":60},"http:\u002F\u002Flists.suse.com\u002Farchive\u002Fsuse-security-announce\u002F2007-Jan\u002F0002.html","Suse",[],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23432","Secunia",[65,66,67],"Exploit","Patch","Vendor Advisory",{"url":69,"source":63,"tags":70},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23435",[66,67],{"url":72,"source":63,"tags":73},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23462",[66,67],{"url":75,"source":63,"tags":76},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23597",[],{"url":78,"source":63,"tags":79},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23727",[],{"url":81,"source":63,"tags":82},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23776",[],{"url":84,"source":63,"tags":85},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23779",[],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-200701-12.xml","Gentoo",[],{"url":91,"source":92,"tags":93},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F2082","Securityreason",[],{"url":95,"source":96,"tags":97},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1017430","Securitytracker",[],{"url":99,"source":100,"tags":101},"http:\u002F\u002Fwww.eazel.es\u002Fadvisory007-mono-xsp-source-disclosure-vulnerability.html","Eazel",[65],{"url":103,"source":104,"tags":105},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDKSA-2006:234","Mandriva",[66,67],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F454962\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":111,"source":108,"tags":112},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F21687",[65,66],{"url":114,"source":115,"tags":116},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002Fusn-397-1","Ubuntu",[66],{"url":118,"source":119,"tags":120},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2006\u002F5099","Vupen",[],{"url":122,"source":123,"tags":124},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A2092","Cisecurity",[],{"url":51,"source":52,"tags":126},[],{"url":55,"source":52,"tags":128},[],{"url":58,"source":59,"tags":130},[],{"url":62,"source":63,"tags":132},[65,66,67],{"url":69,"source":63,"tags":134},[66,67],{"url":72,"source":63,"tags":136},[66,67],{"url":75,"source":63,"tags":138},[],{"url":78,"source":63,"tags":140},[],{"url":81,"source":63,"tags":142},[],{"url":84,"source":63,"tags":144},[],{"url":87,"source":88,"tags":146},[],{"url":91,"source":92,"tags":148},[],{"url":95,"source":96,"tags":150},[],{"url":99,"source":100,"tags":152},[65],{"url":103,"source":104,"tags":154},[66,67],{"url":107,"source":108,"tags":156},[],{"url":111,"source":108,"tags":158},[65,66],{"url":114,"source":115,"tags":160},[66],{"url":118,"source":119,"tags":162},[],{"url":122,"source":123,"tags":164},[],40,[167],{"id":168,"name":168,"description":169},"Unknown","NVD-CWE-Other",1,[],{"title":173,"metaDescription":174,"keywords":175,"canonicalUrl":176,"structuredData":177},"What is CVE-2006-6104? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2006-6104, a medium severity cyber security vulnerability from 2006. The System.Web class in the XSP for ASP.NET server 1.1 thr...","CVE-2006-6104, CVE-2006-6104 vulnerability, CVE-2006-6104 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2006, CVSS score, exploit, patch, remediation, mono security, xsp vulnerability","\u002Fwhat-is\u002Fcve-2006-6104",{"@context":178,"@type":179,"headline":173,"description":174,"datePublished":10,"dateModified":11,"author":180,"publisher":184,"about":188,"mainEntityOfPage":192,"articleSection":195,"keywords":196},"https:\u002F\u002Fschema.org","TechArticle",{"@type":181,"name":182,"url":183},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":181,"name":182,"url":183,"logo":185},{"@type":186,"url":187},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":189,"name":6,"description":190,"additionalType":191},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":193,"@id":194},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2006-6104","Cybersecurity","CVE-2006-6104, CVE-2006-6104 vulnerability, CVE-2006-6104 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[198],{"Operator":28,"Negate":28,"Nodes":199},[200],{"Operator":201,"Negate":32,"CPEMatch":202},"OR",[203,205,207],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":204,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A7582C08-02F6-40C1-9B1C-180A812CDCA8",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":206,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A8CA7330-4EAF-4AF3-9AFE-69A70D35222C",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":208,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6106DBEE-4C36-4007-9E7F-149F4AC9BD09",[],[211],{"id":212,"eventType":213,"eventTime":214,"details":215,"label":216,"color":217},"78ece426-a9e0-45be-b24b-c40b38a48035","LOW_EPSS_DELTA","2026-06-16T04:07:11.686381+00:00","Daily EPSS score decreased by 0.101 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":219,"version":22},1792358852299,{"score":221,"band":36,"action":222,"scoredAt":223},44,"Plan remediation","2026-10-17T06:34:41.674228+00:00"]