83 matches found
CVE-2004-2060
ASPrunner 2.4 stores the database under the web root in the db/ directory, which may allow remote attackers to retrieve the database by directly requesting the database file. The vulnerability is tied to predictable database filenames based on table and field names. Affected product: ASPrunner (2...
CVE-2004-2060
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names...
CVE-1999-0741
CVE-1999-0741 affects QMS CrownNet Unix Utilities for 2060. The vulnerability allows a non-authenticated attacker to gain root access (log on without a password) via the authentication mechanism, enabling complete control over the system. The CVSS data indicates a high-severity, network-exploitab...