← Database

CVE-2006-6999

MEDIUM CVSS: 4.3 Published: 2007-02-12 Modified: 2026-06-16

Description

attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified id parameter.

Affected Platforms

Headstart Solutions Deskpro

Weakness Type

CWE-200

References