NetSight
IP …
medium5.0Public exploit code

CVE-2006-0103

TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, whi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.

Affected products

VendorProductAffected versions
Ralph CapperTinyphpforum
Versions 3.5, 3.6, 3.46, 3.47, 3.48, 3.49

Weakness classification

CWE-200

References