Improper access control

2007-06-0601:30:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.4%

JSON

Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) cactushop6.mdb or (2) cactushop5.mdb.

CPENameOperatorVersion
cactushople6

CPE	Name	Operator	Version
	cactushop	le	6

References

osvdb.org/42052

osvdb.org/42053

securityreason.com/securityalert/2780

www.securityfocus.com/archive/1/470439/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/34706