CVE-2006-4595

The CVE-2006-4595 entry concerns muforum (µforum) 0.4c, where the file membres/members.dat is stored under the web document root with insufficient access control. This allows remote attackers to obtain sensitive information such as usernames and password hashes. The root cause is improper access ...