CVE-2006-4897 CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.
MediumCVSS 5.0
EPSS 8.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cmtexts | <= 1.0 | No fix listed |
References
- 21988 third-party-advisory vendor-advisory
- ADV-2006-3690 vdb-entry
- cmtexts-admin-information-disclosure(28999) vdb-entry
- 2388 exploit