CVE-2009-1821

DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for databases/webblogmanager.mdb...

CVE-2009-1821

DMXReady Registration Manager 1.1 is affected. The root cause is insufficient access control that allows remote attackers to access the web root and download the databases/webblogmanager.mdb file, exposing sensitive data. The impact is partial confidentiality loss due to direct access to the data...

CVE-2009-1821

DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for databases/webblogmanager.mdb...

FreeBSD libc db functions information leak

Uninitialized memory data can be written to database file...

Improper access control

PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request...

CVE-2009-0826

BlogHelper stores commondb.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request...

CVE-2009-0827

PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request...

CVE-2009-0826

CVE-2009-0826: BlogHelper stores common_db.inc under the web root with insufficient access control, enabling remote attackers to download the database file containing user credentials via a direct request. The description and linked references confirm exposure of credential data through direct ac...

CVE-2009-0827

PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request...

CVE-2009-0827

CVE-2009-0827 refers to PollHelper where poll.inc is stored under the web root with insufficient access control. This allows remote attackers to download the database file containing user credentials via a direct request. The entry notes a network-accessible issue with partial confidentiality imp...

Improper access control

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

Improper access control

Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb...

CVE-2008-6387

Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb...

CVE-2008-6388

Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb...

CVE-2008-6375

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb...

CVE-2008-6382

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

CVE-2008-6387

The CVE-2008-6387 entry concerns Quick Tree View .NET 3.1, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to download the database file directly (qtv.mdb). The connected documents reiterate the same description without...

CVE-2008-6388

Rapid Classified 3.1 and 3.15 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to cldb.mdb...

CVE-2008-6387

Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb...

CVE-2008-6382

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...