Lucene search
HistoryFeb 22, 2006 - 2:02 a.m.
CVE-2006-0843
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.01
Percentile
83.5%
Leif M. Wright’s Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator’s password.
Affected configurations
Node
leif_m._wrightweb_blogMatch3.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| leif_m._wright | web_blog | 3.5 | cpe:2.3:a:leif_m._wright:web_blog:3.5:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2006-0843
2006-02-22 02:02:00
prion
prion
Improper access control
2006-02-22 02:02:00
cvelist
cvelist
CVE-2006-0843
2006-02-22 02:00:00
packetstorm
packetstorm
EV0082.txt
2006-03-03 00:00:00
securityvulns
securityvulns
[eVuln] Leif M. Wright's Blog Multiple Vulnerabilities
2006-03-01 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.01
Percentile
83.5%
Related for NVD:CVE-2006-0843