Lucene search
PRIOn knowledge basePRION:CVE-2006-0370HistoryJan 22, 2006 - 8:03 p.m.
Improper access control
2006-01-2220:03:00
PRIOn knowledge base
www.prio-n.com
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.014 Low
EPSS
Percentile
86.2%
Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes.
Related
cvelist
cvelist
CVE-2006-0370
2006-01-22 20:00:00
cve
cve
CVE-2006-0370
2006-01-22 20:03:00
nessus
nessus
RCBlog index.php post Parameter Traversal Arbitrary File Access
2006-01-30 00:00:00
openvas
openvas
RCBlog post Parameter Directory Traversal Vulnerability
2006-03-26 00:00:00
RCBlog post Parameter Directory Traversal Vulnerability
2006-03-26 00:00:00
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.014 Low
EPSS
Percentile
86.2%
Related for PRION:CVE-2006-0370