medium5.0Public exploit code
CVE-2006-2946
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and passw…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure2006-06-05 · webapps · php · Verified
Impact
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dmx Forum | Dmx Forum | through 2.1a |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html
- http://secunia.com/advisories/20450
- http://www.vupen.com/english/advisories/2006/2154
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html
- http://secunia.com/advisories/20450
- http://www.vupen.com/english/advisories/2006/2154