Lucene search
HistoryAug 12, 2009 - 10:30 a.m.
CVE-2008-6940
cve-2008-6940
turnkeyforms
web hosting directory
sensitive information
insufficient access control
remote attackers
database backup
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.9%
TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.
Affected configurations
Node
turnkeyformsweb_hosting_directoryMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| turnkeyforms:web_hosting_directory | turnkeyforms web hosting directory | eq | - |
Related
nvd
nvd
CVE-2008-6940
2009-08-12 10:30:00
cvelist
cvelist
CVE-2008-6940
2009-08-12 10:00:00
prion
prion
Improper access control
2009-08-12 10:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.9%
Related for CVE-2008-6940