CVE

Id
21485  
CVE No.
CVE-2006-5381  
Status
Candidate  
Description
Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.  
Phase
Assigned (20061017)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205017 21485 CVE-2006-5381 BUGTRAQ:20061013 CMS contenido Path Disclosure  View
205018 21485 CVE-2006-5381 URL:http://www.securityfocus.com/archive/1/archive/1/448563/100/0/threaded  View
205019 21485 CVE-2006-5381 SREASON:1738  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59132 JVNDB-2006-001398 Def-Blog の comadd.php における SQL インジェクションの脆弱性 Def-Blog の comadd.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5383 21485 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001398.html  View