CVE-2006-6891

Published: Dec 31, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for users/admin.txt.

Affected (1)

Products: Vz Forum: Vz Forum

Vz Forum

1 product

Vz Forum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vz Forum Vz Forum	Version 2.0.3

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/31220

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3053

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31220

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3053

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.