CVE-2006-5956

LOW 2.1CVE-2006-5956 · Published 17/11/2006 · updated 16/06/2026

In short

CVE-2006-5956 is a LOW (CVSS 2.1) vulnerability affecting phprunner (xlinesoft).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phprunner xlinesoft	`= 3.1`	No fix yet

Description

XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\PHPRunner.ini, which allows local users to obtain sensitive information by reading the file.

References

lostmon.blogspot.com/2006/11/phprunner-database-credentials.html
secunia.com/advisories/22863
securitytracker.com/id
osvdb.org/30363
securityfocus.com/bid/21054

More vulnerabilities in phprunner

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free