Improper access control

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...

CVE-2006-2947

CVE-2006-2947 affects Dmx Forum 2.1a. Remote attackers can obtain usernames/passwords via a direct request to pops/edit.php with a modified membre parameter. CVSS v2 score 5.0 (Medium) — Network, Low complexity, No authentication, Partial confidentiality impact. The provided documents do not incl...

CVE-2006-2946

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...