RSS   Vulnerabilities for 'Articles'   RSS

2009-01-12
 
CVE-2008-5900

CWE-264
 

 
CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAArticles.mdb. NOTE: some of these details are obtained from third party information.

 

 >>> Vendor: Codeavalanche 6 Products
Ratemysite
Freewallpaper
Directory
Freeforall
Articles
Freeforum


Copyright 2017, cxsecurity.com