CVE-2006-0314 | BDVDB-2026-14722 Detail

Description#

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682
http://www.osvdb.org/22402

Exploit#

No public exploit known

History#

Version 12006-01-19Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.