CVE-2005-3551: Toenda Software Development Toendacms

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file.

Affected products

• Toenda Software Development Toendacms: up to and including 0.6.1

Published 2005-11-16. Last modified 2026-06-16.