Lucene search
+L

7 matches found

NVD
NVD
•added 2009/01/12 8:00 p.m.•26 views

CVE-2008-5899

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

7.5CVSS6.5AI score0.06356EPSS
SaveExploits1References3
Prion
Prion
•added 2009/01/12 8:00 p.m.•22 views

Improper access control

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

7.5CVSS7AI score0.06356EPSS
SaveExploits1References3
CVE
CVE
•added 2009/01/12 7:27 p.m.•50 views

CVE-2008-5899

CodeAvalanche FreeForAll (CVE-2008-5899) stores sensitive information under the web root with inadequate access control, enabling remote attackers to download the administrator password database via a direct request to _private/CAFFAPage.mdb. NVD lists a CVSS v2 base score of 7.5 (HIGH; NETWORK a...

7.5CVSS6.7AI score0.06356EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2009/01/12 7:27 p.m.•32 views

CVE-2008-5899

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

6.5AI score0.06356EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/12 12:00 a.m.•3 views

CVE-2008-5899: Undefined Security Weakness

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

7.5CVSS5.9AI score0.06356EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2008/12/15 12:00 a.m.•16 views

CodeAvalanche FreeForAll - Database Disclosure

CodeAvalanche FreeForAll - Database Disclosure --------------------------------------------------------- Portal Name: CAFFAPAGE Download : http://www.truecontent.info/codeavalanche/asp-free-for-all-links.php Author : PouyaServer , [email protected] Vulnerability : DD...

0.4AI score
SaveExploits0
zdt
zdt
•added 2008/12/15 12:00 a.m.•22 views

CodeAvalanche FreeForAll (CAFFAPage.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= CodeAvalanche FreeForAll CAFFAPage.mdb Database Disclosure Vuln =================================================================...

7.1AI score
SaveExploits0
Rows per page
Query Builder