CVE-2006-0103

TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control…

published January 6, 2006

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04076 · 90.6th percentile
Published
2006-01-06T11:00Z
EPSS history
Timeline
  • 06 JAN 11:00Z
    TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control…
    cvelistv5