Vulnerability Database

296,335

Total vulnerabilities in the database

CVE-2006-0756

dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after installation, which allows remote attackers to obtain sensitive configuration information. NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignores the installation instructions as well as warnings generated by check.php

  • Published: Feb 18, 2006
  • Updated: Nov 8, 2023
  • CVE: CVE-2006-0756
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
dotproject / dotproject 2.0 2.0.x
dotproject / dotproject 2.0.1 2.0.1.x