Improper access control

2007-04-1810:19:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

JSON

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
fac_guestbookeq3.01

CPE	Name	Operator	Version
	fac_guestbook	eq	3.01

References

secunia.com/advisories/24872

www.securityfocus.com/bid/23441

exchange.xforce.ibmcloud.com/vulnerabilities/33600