Lucene search
+L

9 matches found

NVD
NVD
•added 2009/01/12 8:00 p.m.•31 views

CVE-2008-5896

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

7.5CVSS6.5AI score0.02435EPSS
SaveExploits1References4
Prion
Prion
•added 2009/01/12 8:00 p.m.•27 views

Improper access control

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

7.5CVSS7AI score0.02435EPSS
SaveExploits1References4
CVE
CVE
•added 2009/01/12 7:27 p.m.•67 views

CVE-2008-5896

CodeAvalanche RateMySite (CVE-2008-5896) is affected. The underlying issue is insufficient access control that stores sensitive data under the web root, allowing remote attackers to download the administrator password database file via a direct request to _private/CARateMySite.mdb. This is suppor...

7.5CVSS6AI score0.02435EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2009/01/12 7:27 p.m.•36 views

CVE-2008-5896

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

6.5AI score0.02435EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/12 12:00 a.m.•11 views

CVE-2008-5896: Undefined Security Weakness

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...

7.5CVSS5.9AI score0.02435EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2008/12/15 12:00 a.m.•17 views

CodeAvalanche RateMySite - Database Disclosure

CodeAvalanche RateMySite - Database Disclosure --------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/12/15 12:00 a.m.•49 views

CodeAvalanche RateMySite - Database Disclosure

--------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

7.5CVSS5.8AI score0.02435EPSS
SaveExploits1
zdt
zdt
•added 2008/12/15 12:00 a.m.•38 views

CodeAvalanche RateMySite (CARateMySite.mdb) Database Disclosure

Exploit for unknown platform in category web applications =============================================================== CodeAvalanche RateMySite CARateMySite.mdb Database Disclosure ===============================================================...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/12/15 12:00 a.m.•22 views

CodeAvalanche RateMySite (CARateMySite.mdb) Database Disclosure

No description provided by source. --------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD...

7.1AI score
SaveExploits0
Rows per page
Query Builder