CVE-2010-0965

Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for siparis.mdb...

CVE-2010-0965

CVE-2010-0965 describes improper access control on a web-facing application where a database file siparis.mdb is stored under the web root, allowing remote attackers to directly download the database. The available documents confirm the vulnerability vector (direct access to siparis.mdb) and the ...

CVE-2010-0965: Undefined Security Weakness

Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for siparis.mdb...