Lucene search
HistoryOct 17, 2006 - 5:07 p.m.
CVE-2006-5316
registrotl
sensitive information
web root
access control
remote attackers
database download
usuarios.dat
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.0%
registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.
Affected configurations
Node
phplibreregistrotlMatch0.1b
ORphplibreregistrotlMatch0.5b
| CPE | Name | Operator | Version |
|---|---|---|---|
| phplibre:registrotl | phplibre registrotl | eq | 0.1b |
| phplibre:registrotl | phplibre registrotl | eq | 0.5b |
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.0%
Related for CVE-2006-5316