CVE-2006-0314: Pdfdirectory

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.

Affected products

• Pdfdirectory Pdfdirectory: version 0.2.2 only; version 0.2.3 only; version 0.2.4 only; version 0.2.5 only; version 0.2.6 only; version 0.2.7 only; …

Published 2006-01-19. Last modified 2026-06-16.