EUVD-2006-3774

Malware in sbrugna...

CVE-2006-3780

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 ANKET/anket.mdb, 2 HABER/keyifweb.mdb, 3 ASP/download.mdb, or 4 SAYAC/aktif.mdb in the database/A9S7G6ASD790...

CVE-2006-3780

CVE-2006-3780 affects Keyifweb Keyif Portal 2.0. The issue is insufficient access control that allows remote attackers to download sensitive database files exposed under the web root, via direct requests to (1) ANKET/anket.mdb, (2) HABER/keyifweb.mdb, (3) ASP/download.mdb, or (4) SAYAC/aktif.mdb ...

keyif.txt

title : Keyif Portal v2.0 - Microsoft Access Driver MDB Download - script site : http://www.keyifweb.com/ - Discovered : xoron - Cont@ct : [email protected] - Exploit : http://www.target.com/path/A9S7G6ASD790/ANKET/anket.mdb http://www.target.com/path/A9S7G6ASD790/HABER/keyifweb.mdb...