CVE-2005-3551

toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a…

published November 16, 2005

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01373 · 71.8th percentile
Published
2005-11-16T07:37Z
EPSS history
Timeline
  • 16 NOV 07:37Z
    toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a…
    cvelistv5