CVE-2006-6866
HIGH 7.8EPSS 3.1%
STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, email addresses, and password hashes via a direct request for data/users.txt.
- CVSS v2.0 NVD
- 7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N - EPSS
- 3.13% chance of exploitation in the next 30 days, 88th percentile
- Published
- 2007-01-04
- Updated
- 2024-08-07