CVE-2006-1764

Summary

Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.vupen.com/english/advisories/2006/1268
• http://secunia.com/advisories/19569
• http://www.osvdb.org/24447

References

• http://www.vupen.com/english/advisories/2006/1268
• http://secunia.com/advisories/19569
• http://www.osvdb.org/24447

• ←Previous
• Next→