CVE-2006-3370

CVE-2006-3370 describes an information disclosure vulnerability in Blueboy 1.0.3, where the bb_news_config.inc file is stored with insufficient access control under the web document root. This allows unauthenticated remote attackers to access sensitive database configuration details. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication or complex attack steps, and primarily impacts confidentiality. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, and it has garnered minimal community discussion or media coverage.