CVE-2006-0843

Published: Feb 22, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password.

Affected (1)

Products: Leif M. Wright: Web Blog

Leif M. Wright

1 product

Web Blog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Leif M. Wright Web Blog	Version 3.5

References (10)

http://secunia.com/advisories/18923

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/522

Source: cve@mitre.org

http://www.evuln.com/vulns/82/summary.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/16712

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24752

Source: cve@mitre.org

http://secunia.com/advisories/18923