NVD

Id
59923  
Name
CVE-2006-1209  
Description
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-03-13  
Modified Date
2008-09-05  
Seq
2006-1209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308350 59923 CVE-2006-1209 http://biyosecurity.be/bugs/patm.txt  View
308351 59923 CVE-2006-1209 565  View
308352 59923 CVE-2006-1209 http://www.blogcu.com/Liz0ziM/316652/  View
308353 59923 CVE-2006-1209 20060309 PHP Advanced Transfer Manager Download users password hashes  View
308354 59923 CVE-2006-1209 20060613 Re: PHP Advanced Transfer Manager Download users password hashes  View
308355 59923 CVE-2006-1209 phpatm-password-hash-disclosure(25127)  View

Related JVN