← Back

Fluffington

fluffington

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Flog
flog
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-0352
1Fluffington
1Flog
Apr 16, 2026
Jan 21, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials)...Show more
The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials) via a direct request. NOTE: It was later reported that 1.1.2 is also affected.Show less