CVE-2006-6449: Vt-Forum Lite

Medium severity, CVSS 6.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Vt-Forum Vt-Forum Lite: version 1.3 only

Published 2006-12-10. Last modified 2026-06-16.