CVE-2006-5381

MEDIUM 5.0CVE-2006-5381 · Published 18/10/2006 · updated 16/06/2026

In short

CVE-2006-5381 is a MEDIUM (CVSS 5.0) vulnerability affecting contendio (contenido).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
contendio contenido	`= 4.5.2_alpha= 4.5.6_beta= 4.6.0`	No fix yet

Description

Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.

References

More vulnerabilities in contendio

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free