medium5.0
CVE-2006-5381
Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other…
Impact
Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contenido | Contendio | Versions 4.5.2_alpha, 4.5.6_beta, 4.6.0 |