CVE-2006-6890

published 2006-12-31

CVE-2006-6890: Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a…

Priority P3 43 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
voc-project	voodoo_chat	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.