Vulnerabilities > VZ Forum

DATE CVE VULNERABILITY TITLE RISK
2006-12-31 CVE-2006-6891 Information Disclosure vulnerability in VZ Forum VZ Forum 2.0.3
Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for users/admin.txt.
network
low complexity
vz-forum
5.0