Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-6866
HistoryDec 31, 2006 - 5:00 a.m.

CVE-2006-6866

2006-12-3105:00:00
[email protected]
web.nvd.nist.gov
1

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.034

Percentile

91.4%

JSON

STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, email addresses, and password hashes via a direct request for data/users.txt.

Affected configurations

Nvd
Node
stphpeasynewsMatch4.0pro
VendorProductVersionCPE
stphpeasynews4.0cpe:2.3:a:stphp:easynews:4.0:*:pro:*:*:*:*:*

Related

cvelist 1
cve 1
exploitdb 1
cvelist
cvelist
CVE-2006-6866
2007-01-04 22:00:00
cve
cve
CVE-2006-6866
2007-01-04 22:00:00
exploitdb
exploitdb
EasyNews PRO News Publishing 4.0 - Password Disclosure
2006-12-29 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.034

Percentile

91.4%

JSON
Related for NVD:CVE-2006-6866
cvelist1cve1exploitdb1