CVE-2006-6891

Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for users/admin.txt.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-12-31

Last modified

2024-08-07

Affected products

• Vz Forum (Vz Forum)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/31220
• https://www.exploit-db.com/exploits/3053