Vulnerability Details CVE-2006-2946
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.028
EPSS Ranking 84.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html
- http://secunia.com/advisories/20450
- http://www.vupen.com/english/advisories/2006/2154
- http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html
- http://secunia.com/advisories/20450
- http://www.vupen.com/english/advisories/2006/2154