EUVD-2006-0359

Malware in sbrugna...

CVE-2006-0352

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information login credentials via a direct request. NOTE: It was later reported that 1.1.2 is also affected...

CVE-2006-0352

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information login credentials via a direct request. NOTE: It was later reported that 1.1.2 is also affected...

CVE-2006-0352

The CVE-2006-0352 entry concerns Fluffington FLog 1.01 (also noted for 1.1.2) where the default configuration places users.0.dat under the web document root with insufficient access control, potentially allowing remote retrieval of sensitive information (login credentials) via a direct request. C...