Lucene search
PRIOn knowledge basePRION:CVE-2012-4069HistoryAug 12, 2012 - 5:55 p.m.
Improper access control
2012-08-1217:55:00
PRIOn knowledge base
www.prio-n.com
1
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.1%
Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db.
Related
cve
cve
CVE-2012-4069
2012-08-12 17:55:00
packetstorm
packetstorm
Dir2web3 3.0 SQL Injection / Information Disclosure
2012-08-05 00:00:00
securityvulns
securityvulns
Dir2web3 Mutiple Vulnerabilities
2012-08-13 00:00:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.1%
Related for PRION:CVE-2012-4069