CVE-2006-4578

export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information.

🔗 References (10)

• PSIRT-CNA@flexerasoftwarehttp://osvdb.org/32563
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/21694
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/secunia_research/2006-76/advisory/
• PSIRT-CNA@flexerasoftwarehttp://www.securityfocus.com/bid/21870
• PSIRT-CNA@flexerasoftwarehttps://exchange.xforce.ibmcloud.com/vulnerabilities/31244
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/32563
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21694
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/secunia_research/2006-76/advisory/
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/21870
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/31244