CVE-2006-0370

Published: Jan 22, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes.

Affected (1)

Products: Noah Medling: Rcblog

Noah Medling

1 product

Rcblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Noah Medling Rcblog	Version 1.03

References (14)

http://evuln.com/vulns/42/summary.html

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/18547

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015523

Source: cve@mitre.org

http://www.fluffington.com/index.php?page=rcblog

Source: cve@mitre.org

URL Repurposed

http://www.osvdb.org/22679

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/422499/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24249

Source: cve@mitre.org

http://evuln.com/vulns/42/summary.html