CVE-2008-5885

The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/quote.mdb. NOTE: some of these details are obtained from third...

Improper access control

The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/quote.mdb. NOTE: some of these details are obtained from third...

CVE-2008-5885

The CVE-2008-5885 entry concerns Net Guys ASPired2Quote, where sensitive data is stored under the web root with insufficient access control. A remote attacker can directly request admin/quote.mdb and download the database file containing usernames and passwords, exposing partial confidentiality. ...