NVD

Id
58843  
Name
CVE-2006-0103  
Description
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-01-06  
Modified Date
2011-03-07  
Seq
2006-0103  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302140 58843 CVE-2006-0103 http://evuln.com/vulns/14/summary.html  View
302141 58843 CVE-2006-0103 320  View
302142 58843 CVE-2006-0103 1015436  View
302143 58843 CVE-2006-0103 20060105 [eVuln] TinyPHPForum Multiple Vulnerabilities  View
302144 58843 CVE-2006-0103 20060417 Tiny PHP forum - vulns  View
302145 58843 CVE-2006-0103 ADV-2006-0054  View
302146 58843 CVE-2006-0103 tinyphpforum-users-information-disclosure(24016)  View

Related JVN