Lucene search
K

278 matches found

Prion
Prion
added 2010/12/01 4:6 p.m.7 views

Improper access control

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

5CVSS6.9AI score0.06213EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2010/12/01 4:6 p.m.1 views

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

5CVSS5.5AI score0.06213EPSS
Exploits1References5
Cvelist
Cvelist
added 2010/12/01 4:0 p.m.16 views

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

6.3AI score0.06213EPSS
Exploits1References4
CVE
CVE
added 2010/12/01 4:0 p.m.44 views

CVE-2009-5019

The CVE-2009-5019 entry describes a vulnerability in Web Wiz NewsPad where sensitive data is stored under the web root with insufficient access control, enabling remote attackers to directly download the database (NewsPad.mdb). Affected component is the NewsPad web application; the root cause is ...

5CVSS6.5AI score0.06213EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2010/11/02 2:26 a.m.9 views

CVE-2010-4145

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb...

5CVSS6.3AI score0.05231EPSS
Exploits1References3
Prion
Prion
added 2010/11/02 2:26 a.m.11 views

Improper access control

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb...

5CVSS6.9AI score0.05231EPSS
Exploits1References3
CVE
CVE
added 2010/11/01 11:0 p.m.37 views

CVE-2010-4145

CVE-2010-4145 concerns Kisisel Radyo Script, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database sevvo/eco23.mdb via a direct request. The vulnerability is rooted in improper access controls exposing a database ...

5CVSS6.5AI score0.05231EPSS
Exploits1References3Affected Software1
OpenVAS
OpenVAS
added 2010/10/18 12:0 a.m.8 views

Cilem Haber Information Disclosure Vulnerability

Cilem Haber is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9AI score
Exploits0References2
Packet Storm
Packet Storm
added 2010/08/07 12:0 a.m.40 views

Site Composer Essentials Database Disclosure

==================================================== Site Composer Essentials DB Download Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

7.4AI score
Exploits0
NVD
NVD
added 2010/05/06 6:30 p.m.10 views

CVE-2010-1736

KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/Krmdb.mdb...

5CVSS6.3AI score0.00294EPSS
Exploits1References4
Prion
Prion
added 2010/05/06 6:30 p.m.8 views

Improper access control

KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/Krmdb.mdb...

5CVSS6.9AI score0.00294EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2010/04/27 3:30 p.m.12 views

CVE-2009-4825

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for AppData/sb.mdb...

5CVSS6.3AI score0.05023EPSS
Exploits1References4
Prion
Prion
added 2010/04/27 3:30 p.m.9 views

Improper access control

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb...

5CVSS6.9AI score0.05023EPSS
Exploits1References4Affected Software1
Prion
Prion
added 2010/04/27 3:30 p.m.15 views

Improper access control

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for AppData/sb.mdb...

5CVSS6.9AI score0.05023EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2010/04/27 3:0 p.m.20 views

CVE-2009-4825

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for AppData/sb.mdb...

6.3AI score0.05023EPSS
Exploits1References4
CVE
CVE
added 2010/04/27 3:0 p.m.52 views

CVE-2009-4825

The CVE-2009-4825 entry relates to 8pixel.net Blog 4, where sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of a database via a direct request for App_Data/sb.mdb. The incident is described as a direct file download vulnerability (no exploit...

5CVSS6.5AI score0.05023EPSS
Exploits1References4Affected Software1
Prion
Prion
added 2010/04/13 6:30 p.m.12 views

Improper access control

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

5CVSS6.9AI score0.0026EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2010/04/13 6:30 p.m.7 views

CVE-2009-4765

CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb...

5CVSS6.3AI score0.00319EPSS
Exploits1References4
CVE
CVE
added 2010/04/13 6:0 p.m.34 views

CVE-2009-4765

CVE-2009-4765 affects CNR Hikaye Portal 2.0. The issue is insufficient access control allowing remote attackers to download the database by requesting db/hikaye.mdb from the web root. Connected documents corroborate the same description across Red Hat and NVD sources. No explicit exploit details,...

5CVSS6.5AI score0.00319EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2010/04/13 6:0 p.m.16 views

CVE-2009-4765

CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb...

6.3AI score0.00319EPSS
Exploits1References4
Rows per page
Query Builder