CVE-2006-2946 - Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information

Back Back to CVE browser

MEDIUM

Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information

Published Jun 12, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 2.77%

Description

Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/20450
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/2154
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/20450		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/2154		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 12, 2006

Updated Aug 7, 2024

Reserved Jun 12, 2006

Link CVE-2006-2946

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2946

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2946