CVE ID:	CVE-2006-0370
Description:	Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0370 Bugtraq: 20060120 [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure (Google Search) http://www.securityfocus.com/archive/1/422499/100/0/threaded http://evuln.com/vulns/42/summary.html http://www.fluffington.com/index.php?page=rcblog http://www.osvdb.org/22679 http://securitytracker.com/id?1015523 http://secunia.com/advisories/18547 XForce ISS Database: rcblog-data-config-insecure-directories(24249) https://exchange.xforce.ibmcloud.com/vulnerabilities/24249