RSS   Podatności dla 'Articles'   RSS

2009-01-12
 
CVE-2008-5900

CWE-264
 

 
CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAArticles.mdb. NOTE: some of these details are obtained from third party information.

 

 >>> Vendor: Codeavalanche 6 Produkty
Ratemysite
Freewallpaper
Directory
Freeforall
Articles
Freeforum


Copyright 2021, cxsecurity.com

 

Back to Top