CVEvulnerability
CVE-2006-0843
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password.
Affected configurations
• leif m. wright web blog 3.5
References
- http://secunia.com/advisories/18923 Vendor Advisory
- http://securityreason.com/securityalert/522 securityreason.com
- http://www.evuln.com/vulns/82/summary.html Vendor Advisory
- http://www.securityfocus.com/bid/16712 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24752 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18923 Vendor Advisory
- http://securityreason.com/securityalert/522 securityreason.com
- http://www.evuln.com/vulns/82/summary.html Vendor Advisory
- http://www.securityfocus.com/bid/16712 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24752 exchange.xforce.ibmcloud.com