CVE-2006-5316

2006-10-1717:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

76.0%

JSON

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat.

References

acid-root.new.fr/poc/13061007.txt

securityreason.com/securityalert/1734

www.securityfocus.com/archive/1/448096/100/0/threaded

www.exploit-db.com/exploits/2502