← voltar
CVE-2006-0103

CVE-2006-0103

EPSS 4.0%
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/27038não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://evuln.com/vulns/14/summary.htmlhttp://secunia.com/advisories/18293http://securityreason.com/securityalert/320http://securitytracker.com/id?1015436https://exchange.xforce.ibmcloud.com/vulnerabilities/24016http://www.osvdb.org/22257http://www.securityfocus.com/archive/1/420933/100/0/threadedhttp://www.securityfocus.com/archive/1/431133/100/0/threadedhttp://www.vupen.com/english/advisories/2006/0054