Vulnerability Database

290,301

Total vulnerabilities in the database

CVE-2006-0843

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password.

  • Published: Feb 22, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-0843
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
leif_m._wright / web_blog 3.5 3.5.x