VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 21, 2006· Updated Jun 16, 2026

CVE-2006-0352

CVE-2006-0352

Description

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials) via a direct request. NOTE: It was later reported that 1.1.2 is also affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fluffington/Flog3 versions
    cpe:2.3:a:fluffington:flog:1.01:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fluffington:flog:1.01:*:*:*:*:*:*:*
    • cpe:2.3:a:fluffington:flog:1.1.2:*:*:*:*:*:*:*
    • (no CPE)range: 1.01, 1.1.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.