« Volver al listado

CVE-2006-0314

Estado: ModificadaAlta (7.5)—

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Pdfdirectory — Pdfdirectory

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-0314",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-01-19T01:03:00.000",
  "references": [
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/22402",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/22402",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
    }
  ],
  "lastModified": "2026-06-16T22:20:19.690",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D9A3688-C10C-42DD-A5E7-F11B2EEA25EF"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C89CAF7F-5C1A-4FCF-B60C-944045726EE5"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BFC1E92-363E-4DA5-AEE6-5F577C5F81B8"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C37613DE-D3F2-4C16-9159-ED13F7CFA2DF"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01CC78FF-0362-4EDE-AE99-1FD979385DEC"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B1A81CE-D2BD-49FD-AF0B-1115D8F58D8A"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C402AEE5-5E7D-4897-B367-A94B458C5DB0"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3005F4CA-ABB7-4AA4-BB2E-006A608BD82C"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16FEE33B-E14A-4688-898F-F9F6CBAF2E15"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2477042A-A2C5-4F7D-B320-2CC1A7C49A37"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}