VulnerabilityModified
CVE-2006-6253
Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql.
MEDIUM 5.0EPSS 1.63%
Does this matter?
Lower severity and a low EPSS score (1.63%). Track it; it rarely justifies an emergency change on its own.
Description
Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.63% probability · 75th percentile
- CISA KEV
- Not listed
- Affected
- cahier de textes/cahier de textes
- Source
- cve@mitre.org
References
- http://acid-root.new.fr/poc/15061124.txtExploit
- http://secunia.com/advisories/23122Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1961
- http://www.securityfocus.com/archive/1/452600/100/0/threaded
- http://www.securityfocus.com/bid/21283
- http://www.vupen.com/english/advisories/2006/4701
- http://acid-root.new.fr/poc/15061124.txtExploit
- http://secunia.com/advisories/23122Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1961
- http://www.securityfocus.com/archive/1/452600/100/0/threaded
- http://www.securityfocus.com/bid/21283
- http://www.vupen.com/english/advisories/2006/4701
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.