CVE-2006-5381

CVE-2006-5381 describes a vulnerability in Contenido CMS where sensitive database credentials and other information are stored under the web root with insufficient access control. This allows remote attackers to directly request specific database configuration files (e.g., db_mysqli.inc) within the conlib/ directory to obtain this data. The vulnerability has a CVSS score of 5.0, indicating a medium severity, as it can be exploited remotely with low attack complexity to compromise confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this 2006 vulnerability.