Lucene search
K

5 matches found

Packet Storm
Packet Storm
added 2007/01/13 12:0 a.m.16 views

ajlogin35-mdb.txt

AJLogin v3.5 Remote Password Disclosure Vulnerability Software: AJLogin Version: 3.5 Download: http://www.randomravings.com/ajasp/dload.asp?file=4 Found by: beks Risk: Medium http://target/AJLoginPath/ajlogin.mdb...

7.4AI score
Exploits0
NVD
NVD
added 2007/01/09 6:28 p.m.15 views

CVE-2007-0153

AJLogin 3.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for ajlogin.mdb...

7.5CVSS6.3AI score0.00874EPSS
Exploits0References4
CVE
CVE
added 2007/01/09 6:0 p.m.41 views

CVE-2007-0153

AJLogin 3.5 stores the database (ajlogin.mdb) under the web root with insufficient access control, enabling remote download of passwords. Affected component: ajlogin.mdb handling; root cause: improper access restrictions. Impact: partial confidentiality loss (passwords exposed). Exploitation deta...

7.5CVSS6.3AI score0.00874EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2007/01/09 6:0 p.m.19 views

CVE-2007-0153

AJLogin 3.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for ajlogin.mdb...

6.3AI score0.00874EPSS
Exploits0References4
securityvulns
securityvulns
added 2007/01/09 12:0 a.m.45 views

AJLogin v3.5 Remote Password Disclosure Vulnerability

AJLogin v3.5 Remote Password Disclosure Vulnerability Software: AJLogin Version: 3.5 Download: http://www.randomravings.com/ajasp/dload.asp?file=4 Found by: beks Risk: Medium http://target/AJLoginPath/ajlogin.mdb...

2.2AI score
Exploits0
Rows per page
Query Builder