Improper access control

PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

Improper access control

Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for siparis.mdb...

CVE-2010-0978

KMSoft Guestbook aka GBook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

CVE-2010-0977

PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

CVE-2010-0984

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat3.mdb...

CVE-2010-0965

CVE-2010-0965 describes improper access control on a web-facing application where a database file siparis.mdb is stored under the web root, allowing remote attackers to directly download the database. The available documents confirm the vulnerability vector (direct access to siparis.mdb) and the ...

CVE-2010-0965

Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for siparis.mdb...

Improper access control

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

The CVE-2010-0939 issue affects Visialis ABB Forum 1.1. It is caused by insufficient access control that allows remote attackers to access and download the database file fpdb/abb.mdb via a direct web request, exposing sensitive information stored under the web root. The available sources confirm ...

CVE-2010-0765

fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/forumFips.mdb...

Al Sat Scripti Database Download Vulnerability

Exploit for unknown platform in category web applications ============================================== Al Sat Scripti Database Download Vulnerability ============================================== ======================================================================================== | Title :...

CVE-2010-0674

StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for path/stats.mdb...

CVE-2010-0674

StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for path/stats.mdb...

AWCM 2.1 Backup Vulnerability

Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/downpro.php?id=30 Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

CVE-2009-4585

UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb...

Improper access control

Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb...

Improper access control

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for systemadmin/admin.ucf...

CVE-2009-3199

Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database with usernames and password hashes via a direct request for systemadmin/admin.ucf...