medium5.0Public exploit code
CVE-2006-1718
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Clever Copy 3.0 - 'Connect.INC' Information Disclosure2006-04-11 · webapps · php · Verified
Impact
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clever Copy | Clever Copy | through 3.0 Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 2.0 |
References
- NVD record
- CVE.org record
- http://advisories.echo.or.id/adv/adv28-K-159-2006.txt
- http://secunia.com/advisories/19579
- http://www.securityfocus.com/archive/1/430369/100/0/threaded
- http://www.securityfocus.com/bid/17461
- http://www.vupen.com/english/advisories/2006/1316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25720
- http://advisories.echo.or.id/adv/adv28-K-159-2006.txt
- http://secunia.com/advisories/19579
- http://www.securityfocus.com/archive/1/430369/100/0/threaded
- http://www.securityfocus.com/bid/17461
- http://www.vupen.com/english/advisories/2006/1316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25720