CVE-2006-6888

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the…

published January 5, 2007

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02433 · 84.1th percentile
Published
2007-01-05T18:00Z
EPSS history
Timeline
  • 05 JAN 18:00Z
    P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the…
    cvelistv5