« Back to list

CVE-2006-0314

Status: ModifiedHigh (7.5)—

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Pdfdirectory — Pdfdirectory

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2006-0314",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-01-19T01:03:00.000",
  "references": [
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/22402",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/22402",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities."
    }
  ],
  "lastModified": "2026-06-16T22:20:19.690",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D9A3688-C10C-42DD-A5E7-F11B2EEA25EF"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C89CAF7F-5C1A-4FCF-B60C-944045726EE5"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BFC1E92-363E-4DA5-AEE6-5F577C5F81B8"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C37613DE-D3F2-4C16-9159-ED13F7CFA2DF"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01CC78FF-0362-4EDE-AE99-1FD979385DEC"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B1A81CE-D2BD-49FD-AF0B-1115D8F58D8A"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C402AEE5-5E7D-4897-B367-A94B458C5DB0"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3005F4CA-ABB7-4AA4-BB2E-006A608BD82C"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16FEE33B-E14A-4688-898F-F9F6CBAF2E15"
            },
            {
              "criteria": "cpe:2.3:a:pdfdirectory:pdfdirectory:0.2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2477042A-A2C5-4F7D-B320-2CC1A7C49A37"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}