CVE-2006-0103

TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information.

Date published : 2006-01-06

http://www.securityfocus.com/archive/1/420933/100/0/threaded

http://www.securityfocus.com/archive/1/431133/100/0/threaded