CVE-2007-3083

Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb...

Improper access control

Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb...

CVE-2007-3061

Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 cactushop6.mdb or 2 cactushop5.mdb...

CVE-2007-3061

Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 cactushop6.mdb or 2 cactushop5.mdb...

Improper access control

Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb...

Z-Blog 1.7 Authentication Bypass Database Download Vulnerability

Author : Hasadya Raed Contact : [email protected] Israel Hacker Greetz : Fairoz : Advisory : Z-Blog 1.7 Authentication Bypass/Database Download Vulnerability Script : Z-Blog 1.7 Impact : Remote Googledork : "Powered by Z-Blog 1.7" , "Powered By Z-Blog 1.7 Laputa Build 70216" Download :...

Improper access control

WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb. NOTE: this issue was originally reported for "webCMS," but this was an error by an unreliable researcher...

Improper access control

RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for rmforum.mdb...

wdse20-db.txt

--/ INTRODUCTION -- Advisory : Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Web Directory / Search Engine v2.0 Impact : Remote Googledork : "Web Directory / Search Engine v2.0" ,...

Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulne

--/ INTRODUCTION -- Advisory : Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Web Directory / Search Engine v2.0 Impact : Remote Googledork : "Web Directory / Search Engine v2.0" ,...

CVE-2007-2753

RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/xice.mdb...

Improper access control

RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/xice.mdb...

CVE-2007-2753

The CVE-2007-2753 entry concerns RunawaySoft Haber portal 1.0, which stores sensitive information under the web root with insufficient access control. The underlying issue allows remote attackers to download a database via a direct request for data/xice.mdb, indicating a direct exposure of data t...

Improper access control

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2100

FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb...

CVE-2007-2101

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2100

CVE-2007-2100 affects FAC Guestbook 2.0. The vulnerability arises from insufficient access control, allowing remote attackers to directly access and download the database file db/Gdb.mdb from the web root. The published description indicates this could compromise confidentiality (complete impact)...

CVE-2007-2101

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-7086

The 1 dlback.php and 2 dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter...

CVE-2007-0593

Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt...