CVE-2006-6890 - Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat

Back Back to CVE browser

HIGH

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat

Published Jan 5, 2007

7.5

HIGH

CVSS 2.0

EPSS 2.28%

Description

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6873
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31221
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3044
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6873		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31221		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3044		exploitx_refsource_EXPLOIT-DB