CVE-2006-3371

2006-07-0620:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.012

Percentile

85.5%

JSON

Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration.

References

secunia.com/advisories/20945

securityreason.com/securityalert/1192

www.securityfocus.com/archive/1/438964/100/0/threaded

www.securityfocus.com/bid/18817

www.vupen.com/english/advisories/2006/2663

exchange.xforce.ibmcloud.com/vulnerabilities/27577