2 matches found
CVE-2008-5886: Undefined Security Weakness
TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for private/discussion.mdb. NOTE: some of these details are obtained from third part...
5CVSS5.9AI score0.02587EPSS
SaveExploits1References2
ProductCart 1.51.62.0 - File Disclosure
ProductCart 1.51.62.0 - File Disclosure source: https://www.securityfocus.com/bid/8112/info A vulnerability has been reported for ProductCart that may result in an attacker obtaining the contents of the database file. http://victimhost/productcart/database/EIPC.mdb...
7.4AI score
SaveExploits0
20