EUVD-2007-0159

Malware in sbrugna...

harika20-mdb.txt

HarikaOnline v2.0 Remote Password Disclosure Vulnerability Software: HarikaOnline Version: 2.0 Download: http://aspindir.com/indir.asp?id=4563 Found by: beks Risk: Medium http://target/harikaonlinePath/harikaonline.mdb...

CVE-2007-0155

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb...

CVE-2007-0155

HarikaOnline 2.0 is affected: the application stores its database harikaonline.mdb under the web root with insufficient access control, enabling remote attackers to download the password-containing database via a direct request. The issue yields partial confidentiality and integrity (and partial ...

CVE-2007-0155

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb...

HarikaOnline v2.0 Remote Password Disclosure Vulnerability

HarikaOnline v2.0 Remote Password Disclosure Vulnerability Software: HarikaOnline Version: 2.0 Download: http://aspindir.com/indir.asp?id=4563 Found by: beks Risk: Medium http://target/harikaonlinePath/harikaonline.mdb...

CVE-2007-0155: Undefined Security Weakness

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb...