CVE-2006-4897 - CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password

Back Back to CVE browser

MEDIUM

CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password

Published Sep 19, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 8.02%

Description

CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/21988
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/3690
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4884
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28999
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2388
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/21988		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/3690		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4884		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28999		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2388		exploitx_refsource_EXPLOIT-DB