CVE-2009-0498

CVE-2009-0498 affects Virtual GuestBook (vgbook) 2.1. The data store is placed under the web root with insufficient access control, permitting remote attackers to directly download the database file (guestbook.mdb). This is a file-read access issue driven by improper access restrictions on web-ac...

CVE-2009-0498: Undefined Security Weakness

Virtual GuestBook vgbook 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to guestbook.mdb...