CVE-2006-0352

The CVE-2006-0352 entry concerns Fluffington FLog 1.01 (also noted for 1.1.2) where the default configuration places users.0.dat under the web document root with insufficient access control, potentially allowing remote retrieval of sensitive information (login credentials) via a direct request. C...