CVE-2006-0704

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.21%

Published

Feb 15, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, web server name, IP, and port, session cookie information, and the IIS system username.

Affected Products (1)

ie · ie_integratorvulnerable

References (8)

http://secunia.com/advisories/18813

Vendor Advisory

http://www.irmplc.com/advisory016.htm

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0568

https://exchange.xforce.ibmcloud.com/vulnerabilities/24714

http://secunia.com/advisories/18813

Vendor Advisory

http://www.irmplc.com/advisory016.htm

Vendor Advisory

http://www.vupen.com/english/advisories/2006/0568

https://exchange.xforce.ibmcloud.com/vulnerabilities/24714

KEV Catalog EPSS Scores Vendors All CVEs