CVE-2006-0370

Description

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24249

http://www.securityfocus.com/archive/1/422499/100/0/threaded

http://www.osvdb.org/22679

http://www.fluffington.com/index.php?page=rcblog

http://securitytracker.com/id?1015523

http://secunia.com/advisories/18547

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS