muforum (µforum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes.
References
Configurations
History
21 Nov 2024, 00:16
Type | Values Removed | Values Added |
---|---|---|
References | () http://acid-root.new.fr/poc/08060901.txt - Exploit | |
References | () http://secunia.com/advisories/21742 - Vendor Advisory | |
References | () http://securityreason.com/securityalert/1514 - | |
References | () http://www.securityfocus.com/archive/1/445001/100/0/threaded - | |
References | () http://www.vupen.com/english/advisories/2006/3445 - Vendor Advisory |
Information
Published : 2006-09-07 00:04
Updated : 2024-11-21 00:16
NVD link : CVE-2006-4595
Mitre link : CVE-2006-4595
CVE.ORG link : CVE-2006-4595
JSON object : View
Products Affected
muforum
- muforum
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor