CVE-2006-0103
TinyPHPForum <= 3.6 - Unauthenticated Exposure of Sensitive User Information via Web-Accessible Hash and Email Files
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0103. PoCs published by Aliaksandr Hartsuyeu.
AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in TinyPHPForum 3.6, allowing attackers to retrieve arbitrary files via unsanitized input in the 'uname' parameter. No actual exploit code is present, only a description and example URL.
Description
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.
Exploits (1)
The provided text describes a directory traversal vulnerability in TinyPHPForum 3.6, allowing attackers to retrieve arbitrary files via unsanitized input in the 'uname' parameter. No actual exploit code is present, only a description and example URL.