SUSE CVE-2007-0079

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

CVE-2007-0079

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

CVE-2007-0079

CVE-2007-0079 describes a vulnerability in a web application (rblog) where sensitive data files are stored under the web root with insufficient access control. An attacker can directly download the databases (data/admin.mdb and data/rblog.mdb) via HTTP requests, leading to complete data disclosur...

CVE-2007-0079

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

rblog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact:...

RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity

No description provided by source. Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb...

RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity

Exploit for unknown platform in category web applications ============================================================= RBlog 1.0 admin.mdb Remote Password Disclosure Vulnerablity ============================================================= Discovered: Aria-Security Team Risk: Low Type:Remote...

RBlog 1.0 - 'admin.mdb' Remote Password Disclosure

Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...

RBlog 1.0 - admin.mdb Remote Password Disclosure

RBlog 1.0 - admin.mdb Remote Password Disclosure Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01...