CVE-2006-3483

CVE-2006-3483 describes a vulnerability in PHPMailList version 1.8.0 where sensitive data files (list.dat and ml_config.dat) are stored under the web root with inadequate access controls. This allows unauthenticated remote attackers to directly access these files and obtain subscriber email addresses, configuration details, and the administrator's username and password. The vulnerability has a CVSS score of 5.0, indicating a medium severity, as it is easily exploitable over the network with no authentication required, leading to partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.