Improper access control

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

CVE-2007-0077

lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/...

CVE-2007-0078

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb...

CVE-2007-0076

Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb...

BattleBlog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

lblog Remote Password Disclosure

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://www.lblog.dk/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/admin/db/newFolder/ THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER Contact...

newsCMSlite (newsCMS.mdb) Remote Password Disclosure Vulnerablity

newsCMSlite newsCMS.mdb Remote Password Disclosure Vulnerablity Author: KabusTR.coM KaBuS at KabusTr.coM Homepage: http://kabustr.com KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@zKurT | DeMoN | From Turkiye - Www.KabusTr.coM Risk: Low Download Adress:...

rblog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact:...

rblog-db.txt

Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected]...

battleblog-db.txt

Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity

No description provided by source. Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb...

CVE-2006-6829

Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

NewsCMSLite - newsCMS.mdb Remote Password Disclosure

NewsCMSLite - newsCMS.mdb Remote Password Disclosure newsCMSlite newsCMS.mdb Remote Password Disclosure Vulnerablity Author: KabusTR.coM Homepage: http://kabustr.com KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@zKurT | DeMoN | From Turkiye - Www.KabusTr.coM Risk: Low Download Adress:...

RBlog 1.0 - admin.mdb Remote Password Disclosure

RBlog 1.0 - admin.mdb Remote Password Disclosure Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01...

RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity

Exploit for unknown platform in category web applications ============================================================= RBlog 1.0 admin.mdb Remote Password Disclosure Vulnerablity ============================================================= Discovered: Aria-Security Team Risk: Low Type:Remote...

NewsCMSLite - 'newsCMS.mdb' Remote Password Disclosure

newsCMSlite newsCMS.mdb Remote Password Disclosure Vulnerablity Author: KabusTR.coM Homepage: http://kabustr.com KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@zKurT | DeMoN | From Turkiye - Www.KabusTr.coM Risk: Low Download Adress: http://www.katywhitton.com/downloads/newsCMSlite/ Type:Remote...

RBlog 1.0 - 'admin.mdb' Remote Password Disclosure

Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...

CVE-2006-6825

Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for calendar.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-6825

Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for calendar.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-6825

CVE-2006-6825 affects Calendar MX BASIC 1.0.2 and earlier. The vulnerability arises because the application stores sensitive information under the web root with insufficient access control, enabling remote attackers to download the database (calendar.mdb) via a direct request. The records indicat...