CVE-2006-0370

Name of the Vulnerable Software and Affected Versions RCBlog version 1.03

Description The issue allows remote attackers to view account names and MD5 password hashes due to insufficient access control of the data and config directories stored under the web root.

Recommendations For RCBlog version 1.03, consider restricting access to the data and config directories to prevent remote viewing of sensitive information. As a temporary workaround, restrict access to these directories until a proper fix is applied.