medium5.0Public exploit code
CVE-2007-6395
Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain creden…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Flat PHP Board 1.2 - Multiple Vulnerabilities2007-12-09 · webapps · php · Verified
Impact
Flat PHP Board 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for the username php file for any user account in users/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flat Php | Board | through 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/43893
- http://www.securityfocus.com/archive/1/484803/100/100/threaded
- http://www.securityfocus.com/bid/26782
- https://www.exploit-db.com/exploits/4705
- http://osvdb.org/43893
- http://www.securityfocus.com/archive/1/484803/100/100/threaded
- http://www.securityfocus.com/bid/26782
- https://www.exploit-db.com/exploits/4705