7.5
CVE-2006-0314
- EPSS 1.11%
- Veröffentlicht 19.01.2006 01:03:00
- Zuletzt bearbeitet 16.06.2026 22:20:19
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginPDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pdfdirectory ≫ Pdfdirectory Version0.2.2
Pdfdirectory ≫ Pdfdirectory Version0.2.3
Pdfdirectory ≫ Pdfdirectory Version0.2.4
Pdfdirectory ≫ Pdfdirectory Version0.2.5
Pdfdirectory ≫ Pdfdirectory Version0.2.6
Pdfdirectory ≫ Pdfdirectory Version0.2.7
Pdfdirectory ≫ Pdfdirectory Version0.2.8
Pdfdirectory ≫ Pdfdirectory Version0.2.9
Pdfdirectory ≫ Pdfdirectory Version0.2.10
Pdfdirectory ≫ Pdfdirectory Version0.2.11
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.11% | 0.617 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682
http://www.osvdb.org/22402