rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4708 
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4709 
SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4710 
Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4711 
Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4712 
Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4713 
PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4714 
PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4715 
SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4716 
PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4717 
The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4718 
Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) prenom, (2) emailFrom, or (3) body parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4719 
Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) index.php or (2) pop.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4720 
PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4721 
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4722 
PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4723 
PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-4724 
Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7.01 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors involving a crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4725 
Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates that are located outside of the sandbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4726 
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4727 
Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the (1) lineId and (2) sort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-09T17:00:00.000Z
CVE-2006-4731 
Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T00:00:00.000Z
CVE-2006-4732 
Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4733 
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter.  NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4734 
Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the (1) pid and (2) where parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4735 
Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4736 
Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4737 
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter.  NOTE: The view vector is already covered by CVE-2006-3586.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4738 
PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter.  NOTE: The relative_script_path vector is already covered by CVE-2006-2270.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4739 
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4740 
Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4741 
PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4742 
Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4743 
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6) blogger.php, (7) comments.php, (8) comments-popup.php, (9) dotclear.php, (10) footer.php, (11) functions.php, (12) header.php, (13) hello.php, (14) wp-content/themes/default/index.php, (15) links.php, (16) livejournal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single.php, (24) textpattern.php, (25) upgrade-functions.php, (26) upgrade-schema.php, or (27) wp-db-backup.php, which reveal the path in various error messages.  NOTE: another researcher has disputed the details of this report, stating that version 2.0.5 does not exist. NOTE: the admin-footer.php, admin-functions.php, default-filters.php, edit-form-advanced.php, edit-link-form.php, edit-page-form.php, kses.php, locale.php, rss-functions.php, template-loader.php, and wp-db.php vectors are already covered by CVE-2006-0986. The edit-form-comment.php, vars.php, and wp-settings.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4744 
Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4745 
ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4746 
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4747 
Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4748 
Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) xagent, (2) xpath, (3) xreferer, and (4) xdns parameters in (a) admin/plugins/NP_Log.php, and the (5) pitem parameter in (b) admin/plugins/NP_Poll.php; and allow remote authenticated users to execute arbitrary SQL commands via the (6) pageRef parameter in (c) admin/plugins/NP_Referrer.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4749 
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attackers to execute arbitrary PHP code via the include_location parameter in (1) activate.php, (2) configure.php, (3) fileop.php, (4) getimg.php, (5) ipblocked.php, (6) register.php, (7) showrecent.php, (8) showtophits.php, (9) usrmanag.php, (10) viewer_bottom.php, (11) viewer_content.php, and (12) viewer_top.php.  NOTE: The login.php and confirm.php vectors are already covered by CVE-2006-4594.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4750 
PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4751 
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4752 
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4753 
Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4754 
Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4755 
Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4756 
SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2006-4757 
Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) download_category_class parameter in (c) download.php.  NOTE: an e107 developer has disputed the significance of the vulnerability, stating that "If your admins are injecting you, you might want to reconsider their access."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4758 
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4759 
PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated administrative users to upload arbitrary files and execute code, as demonstrated by a query to admin_options.php with an avatars_dir parameter ending in %00. NOTE: this issue was originally disputed by the vendor, but the dispute was withdrawn on 20060926.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4760 
Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4761 
Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4762 
Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4763 
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4764 
PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4765 
NETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial of service (device hang) via a long string in the username field in the login window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4766 
Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers to read arbitrary files via a .. (dot dot) in the ide parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4767 
Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to (1) read arbitrary local files via a .. (dot dot) sequence in the ide parameter in modify.php and (2) write to arbitrary local files via a .. sequence in the var parameter in add_go.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4768 
Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file.  NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4769 
PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abs_pfad parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4770 
PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T23:00:00.000Z
CVE-2006-4771 
Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web script or HTML via the nb_connecte parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4772 
HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z