CVE

Id
21001  
CVE No.
CVE-2006-4897  
Status
Candidate  
Description
CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199093 21001 CVE-2006-4897 MILW0RM:2388  View
199094 21001 CVE-2006-4897 URL:http://milw0rm.com/exploits/2388  View
199095 21001 CVE-2006-4897 VUPEN:ADV-2006-3690  View
199096 21001 CVE-2006-4897 URL:http://www.vupen.com/english/advisories/2006/3690  View
199097 21001 CVE-2006-4897 SECUNIA:21988  View
199098 21001 CVE-2006-4897 URL:http://secunia.com/advisories/21988  View
199099 21001 CVE-2006-4897 XF:cmtexts-admin-information-disclosure(28999)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59020 JVNDB-2006-001286 CA eTrust Security Command Center の ePPIServlet スクリプトにおけるサーバのパスを取得される脆弱性 Computer Associates (CA) eTrust Security Command Center の ePPIServlet スクリプトは、Windows 上で稼働する際、エラーメッセージ内にパスを表示する不備があるため、Web サーバのパスを取得される脆弱性が存在します。 CVE-2006-4899 21001 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001286.html  View