EUVD-2007-0153

Malware in sbrugna...

ememberspro10-mdb.txt

EMembersPro 1.0 Remote Password Disclosure Vulnerability Software: EMembersPro Version: 1.0 Download: http://www.keyvan1.com/package/member.zip Found by: beks Risk: Medium http://target/EMembersProPath/users.mdb...

CVE-2007-0149

EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for users.mdb...

CVE-2007-0149

CVE-2007-0149 affects EMembersPro 1.0. The vulnerability is due to insufficient access control: the application stores sensitive information under the web root, allowing remote attackers to directly request users.mdb and obtain a database containing passwords. This can lead to partial disclosure ...

CVE-2007-0149

EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for users.mdb...

EMembersPro 1.0 Remote Password Disclosure Vulnerability

EMembersPro 1.0 Remote Password Disclosure Vulnerability Software: EMembersPro Version: 1.0 Download: http://www.keyvan1.com/package/member.zip Found by: beks Risk: Medium http://target/EMembersProPath/users.mdb...

CVE-2007-0149: Undefined Security Weakness

EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for users.mdb...