CVE-2006-4578

Published Jan 3, 2007 CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Description
export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2006-4566 export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
flexera
Published
Updated
Aug 7, 2024, 7:14 PM
Reserved
Sep 6, 2006, 12:00 AM
Status
Modified
Published
Dec 31, 2006, 5:00 AM
Modified
Jun 16, 2026, 10:29 PM