Test ID:	1.3.6.1.4.1.25623.1.0.106036
Category:	Web application abuses
Title:	Froxlor Information Disclosure Vulnerability - Active Check
Summary:	Froxlor is prone to an information disclosure vulnerability.
Description:	Summary: Froxlor is prone to an information disclosure vulnerability. Vulnerability Insight: An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file permissions of the /logs/ folder. The plain SQL password and username may be stored in the /logs/sql-error.log file. Vulnerability Impact: An unauthenticated remote attacker may be able to get the plain SQL password and username or other sensitive information. Affected Software/OS: Froxlor version 0.9.33.1 and prior. Solution: Update to version 0.9.33.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5959 BugTraq ID: 76097 http://www.securityfocus.com/bid/76097 http://www.openwall.com/lists/oss-security/2015/08/07/2
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.