CVE-2006-1764

Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2006-04-13

Last modified

2024-08-07

Affected products

• Hosting Controller (Hosting Controller)

References

• http://secunia.com/advisories/19569
• http://www.osvdb.org/24447
• http://www.vupen.com/english/advisories/2006/1268