CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

aspuserengine-disclose.txt

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : ASP User Engine .NET download :...

User Engine Lite ASP - 'users.mdb' Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : User Engine ASP Lite download :...

ASP User Engine .NET Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================= ASP User Engine .NET Remote Database Disclosure Vulnerability =============================================================...

ememberspro10-mdb.txt

EMembersPro 1.0 Remote Password Disclosure Vulnerability Software: EMembersPro Version: 1.0 Download: http://www.keyvan1.com/package/member.zip Found by: beks Risk: Medium http://target/EMembersProPath/users.mdb...

EMembersPro 1.0 Remote Password Disclosure Vulnerability

EMembersPro 1.0 Remote Password Disclosure Vulnerability Software: EMembersPro Version: 1.0 Download: http://www.keyvan1.com/package/member.zip Found by: beks Risk: Medium http://target/EMembersProPath/users.mdb...

PT-2005-2802 · Nextweb · Nextweb Isite

Name of the Vulnerable Software and Affected Versions: NEXTWEB iSite affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb due to insufficient access control. This is because databases are stored...