EUVD-2007-0156

Malware in sbrugna...

CVE-2007-0152

OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb...

CVE-2007-0152

OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb...

CVE-2007-0152

The CVE-2007-0152 entry concerns OhhASP, where sensitive information is stored under the web root with insufficient access control. The described vulnerability allows remote attackers to download a database containing passwords by directly requesting db/OhhASP.mdb, affecting confidentiality (part...

ohhASP Remote Password Disclosure

ARIA-SECURITY TEAM Forum: http://aria-security.com Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://sourceforge.net/project/showf...groupid=42824 PoC: http://victim.com/path/db/OhhASP.mdb Contact: [email protected]...