CVE-2006-6351 - KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb

Back Back to CVE browser

HIGH

KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb

Published Dec 7, 2006

10.0

HIGH

CVSS 2.0

EPSS 2.37%

Description

KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://secunia.com/advisories/23310
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1999
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/453328/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/30661
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/23310		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1999		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/453328/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/30661		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 7, 2006

Updated Aug 7, 2024

Reserved Dec 6, 2006

Link CVE-2006-6351

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6351

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6351