CVE-2006-4897: Cmtexts

Medium severity, CVSS 5.0. EPSS: 8% chance of exploitation in the next 30 days.

CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.

Affected products

• Cmtexts Cmtexts: up to and including 1.0

Published 2006-09-19. Last modified 2026-06-16.