8 matches found
EUVD-2009-1054
Malware in sbrugna...
Improper access control
chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv...
CVE-2009-1053
chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv...
CVE-2009-1053
chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv...
CVE-2009-1053
CVE-2009-1053 affects chaozzDB 1.2 and earlier . The vulnerability arises from storing sensitive information under the web root with insufficient access control , enabling remote attackers to download a database containing user credentials by requesting the user.tsv file directly. The documented ...
CVE-2009-1053: Undefined Security Weakness
chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv...
[ECHO_ADV_105$2009] chaozzDB <= 1.2 Critical File Disclosure Vulnerability
ECHOADV105$2009 ----------------------------------------------------------------------------------------- ECHOADV105$2009 chaozzDB = 1.2 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 16...
chaozzDB 1.2 File Disclosure
ECHOADV105$2009 ----------------------------------------------------------------------------------------- ECHOADV105$2009 chaozzDB = 1.2 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 16...