CVE-2006-5381

Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other…

published October 18, 2006

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01162 · 66.9th percentile
Published
2006-10-18T10:00Z
EPSS history
Timeline
  • 18 OCT 10:00Z
    Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other…
    cvelistv5