CVE-2008-5899

CodeAvalanche FreeForAll (CVE-2008-5899) stores sensitive information under the web root with inadequate access control, enabling remote attackers to download the administrator password database via a direct request to _private/CAFFAPage.mdb. NVD lists a CVSS v2 base score of 7.5 (HIGH; NETWORK a...

CVE-2008-5898

CVE-2008-5898 concerns the CodeAvalanche Directory, where insufficient access control allows remote attackers to download the database file containing the administrator password through a direct request to _private/CADirectory.mdb. The NVD entry notes an exposed, sensitive database under the web ...

CVE-2008-5899

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

CVE-2008-5896

CodeAvalanche RateMySite (CVE-2008-5896) is affected. The underlying issue is insufficient access control that stores sensitive data under the web root, allowing remote attackers to download the administrator password database file via a direct request to _private/CARateMySite.mdb. This is suppor...

CVE-2008-5900

CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAArticles.mdb. NOTE: some of these details are obtained from...

CVE-2008-5898

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CADirectory.mdb. NOTE: some of these details are obtained fr...

CVE-2008-5900

CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, enabling remote attackers to download the database file CAArticles.mdb via a direct request to _private/CAArticles.mdb. Affected component: the web-accessible data store of CodeAvalanche Artic...

CVE-2008-5897

CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFreeWallpaper.mdb. NOTE: some of these details are...

CVE-2008-5896

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

CVE-2008-5897

CodeAvalanche FreeWallpaper is affected by an improper access control vulnerability that stores the administrator password database under the web root. An attacker can directly request the file _private/CAFreeWallpaper.mdb to download the database containing the administrator password. The CVE-20...

CVE-2008-5898: Undefined Security Weakness

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CADirectory.mdb. NOTE: some of these details are obtained fr...

CVE-2008-5896: Undefined Security Weakness

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

CVE-2008-5900: Undefined Security Weakness

CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAArticles.mdb. NOTE: some of these details are obtained from...

CVE-2008-5899: Undefined Security Weakness

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

CVE-2008-5897: Undefined Security Weakness

CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFreeWallpaper.mdb. NOTE: some of these details are...

CodeAvalanche RateMySite - Database Disclosure

CodeAvalanche RateMySite - Database Disclosure --------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD...

CodeAvalanche FreeWallpaper Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: CAFreeWallpaper Download : http://www.truecontent.info/codeavalanche/asp-freewallpaper-script.php Author : PouyaServer , [email protected] Vulnerability : DD...

CodeAvalanche FreeForAll - Database Disclosure

CodeAvalanche FreeForAll - Database Disclosure --------------------------------------------------------- Portal Name: CAFFAPAGE Download : http://www.truecontent.info/codeavalanche/asp-free-for-all-links.php Author : PouyaServer , [email protected] Vulnerability : DD...

CodeAvalanche Directory (CADirectory.mdb) Database Disclosure Vuln

No description provided by source. --------------------------------------------------------- Portal Name: CADirectory Download : http://www.truecontent.info/codeavalanche/asp-directory-script.php Author : PouyaServer , [email protected] Vulnerability : DD...

CodeAvalanche Articles (CAArticles.mdb) Database Disclosure Vuln

No description provided by source. --------------------------------------------------------- Portal Name: CAArticles Download : http://www.truecontent.info/codeavalanche/asp-articles-publishing-script.php Author : PouyaServer , [email protected] Vulnerability : DD...