Lucene search
MitreCVE-2007-2100HistoryApr 18, 2007 - 10:19 a.m.
CVE-2007-2100
2007-04-1810:19:00
mitre
web.nvd.nist.gov
31
cve-2007-2100
fac guestbook 2.0
sensitive information
web root
access control
remote attackers
database download
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.011
Percentile
84.5%
FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb.
Affected configurations
Node
fac_guestbookfac_guestbookMatch2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fac_guestbook | fac_guestbook | 2.0 | cpe:2.3:a:fac_guestbook:fac_guestbook:2.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2007-2100
2007-04-18 10:00:00
prion
prion
Improper access control
2007-04-18 10:19:00
nvd
nvd
CVE-2007-2100
2007-04-18 10:19:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.011
Percentile
84.5%
Related for CVE-2007-2100