CVE-2006-0352

Published: Jan 21, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials) via a direct request. NOTE: It was later reported that 1.1.2 is also affected.

Affected (2)

Products: Fluffington: Flog

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fluffington Flog	Version 1.01
Fluffington Flog	Version 1.1.2

References (10)

http://evuln.com/vulns/38/summary/bt/

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/422268/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456069/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24193

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31307

Source: cve@mitre.org

http://evuln.com/vulns/38/summary/bt/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/422268/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/456069/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24193

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/31307

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.