CVE-2008-6055

2009-02-0415:10:00

mitre

www.cve.org

preprojects classified listings

access control

vulnerability

remote attackers

passwords

AI Score

6.6

Confidence

Low

EPSS

0.005

Percentile

75.8%

JSON

PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

References

packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txt

secunia.com/advisories/33197