Vulnerabilities > CVE-2006-6891 - Information Disclosure vulnerability in VZ Forum VZ Forum 2.0.3

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
vz-forum
exploit available
NVD
Published: 2006-12-31
Updated: 2017-10-19

Summary

Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for users/admin.txt.

Vulnerable Configurations

Part Description Count
Application
Vz_Forum
1

Exploit-Db

descriptionVz (Adp) Forum 2.0.3 Remote Password Disclosure Vulnerablity. CVE-2006-6891. Webapps exploit for php platform
fileexploits/php/webapps/3053.txt
idEDB-ID:3053
last seen2016-01-31
modified2006-12-31
platformphp
port
published2006-12-31
reporter3l3ctric-Cracker
sourcehttps://www.exploit-db.com/download/3053/
titleVz Adp Forum 2.0.3 - Remote Password Disclosure Vulnerablity
typewebapps

References