Improper access control

Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb...

Improper access control

MitiSoft stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for accessMS/MitiSoft.mdb...

Improper access control

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb...

CVE-2007-0090

WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb...

CVE-2007-0096

CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.mdb...

CVE-2007-0077

lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/...

Improper access control

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

CVE-2007-0078

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb...

CVE-2007-0076

Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb...

rblog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact:...

lblog Remote Password Disclosure

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://www.lblog.dk/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/admin/db/newFolder/ THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER Contact...

BattleBlog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

newsCMSlite (newsCMS.mdb) Remote Password Disclosure Vulnerablity

newsCMSlite newsCMS.mdb Remote Password Disclosure Vulnerablity Author: KabusTR.coM KaBuS at KabusTr.coM Homepage: http://kabustr.com KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@zKurT | DeMoN | From Turkiye - Www.KabusTr.coM Risk: Low Download Adress:...

rblog-db.txt

Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected]...

RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity

No description provided by source. Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb...

battleblog-db.txt

Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

CVE-2006-6829

Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

NewsCMSLite - newsCMS.mdb Remote Password Disclosure

NewsCMSLite - newsCMS.mdb Remote Password Disclosure newsCMSlite newsCMS.mdb Remote Password Disclosure Vulnerablity Author: KabusTR.coM Homepage: http://kabustr.com KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@zKurT | DeMoN | From Turkiye - Www.KabusTr.coM Risk: Low Download Adress:...

RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity

Exploit for unknown platform in category web applications ============================================================= RBlog 1.0 admin.mdb Remote Password Disclosure Vulnerablity ============================================================= Discovered: Aria-Security Team Risk: Low Type:Remote...

NewsCMSLite - 'newsCMS.mdb' Remote Password Disclosure

newsCMSlite newsCMS.mdb Remote Password Disclosure Vulnerablity Author: KabusTR.coM Homepage: http://kabustr.com KabusTr.coM | KaBuS | Hkinq | SinsiTr | Bey@zKurT | DeMoN | From Turkiye - Www.KabusTr.coM Risk: Low Download Adress: http://www.katywhitton.com/downloads/newsCMSlite/ Type:Remote...