CVE-2006-2947 Information disclosure in n/a
Remote attackers can obtain username and password information by sending a direct request to a specific script with a modified parameter.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-2947?
CVE-2006-2947 is a medium-severity vulnerability in n/a, published on 12 Jun 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter.
Which versions are affected by CVE-2006-2947?
It affects 1 product.
Products include Dmx Forum Dmx Forum.
How do I fix CVE-2006-2947?
No fix has been published for CVE-2006-2947 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-2947 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-2947 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7gqc-frj2-q3gr.