CVE-2007-0155

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for harikaonline.mdb...

CVE-2007-0149

CVE-2007-0149 affects EMembersPro 1.0. The vulnerability is due to insufficient access control: the application stores sensitive information under the web root, allowing remote attackers to directly request users.mdb and obtain a database containing passwords. This can lead to partial disclosure ...

Improper access control

Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for 1 gbook97.mdb or 2 gbook.mdb in db/...

Improper access control

jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb...

Improper access control

newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb...

Improper access control

WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb...

CVE-2007-0094

Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for 1 gbook97.mdb or 2 gbook.mdb in db/...

CVE-2006-6889

CVE-2006-6889 affects FreeStyle Wiki (fswiki) 3.6.2 and earlier. The issue is that sensitive information (including passwords) is stored under the web root with insufficient access control, allowing remote attackers to obtain passwords by directly requesting config/user.dat. The provided document...

CVE-2007-0094

Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for 1 gbook97.mdb or 2 gbook.mdb in db/...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

CVE-2006-6891

Vz Adp Forum 2.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for users/admin.txt...

CVE-2007-0091

CVE-2007-0091 affects newsCMSlite and is caused by insufficient access control that allows remote attackers to download the web root database (newsCMS.mdb), exposing passwords. The connected records confirm this vulnerability type and impact but do not provide affected versions, vendor patches, o...

CVE-2007-0079

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

Improper access control

AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...

Improper access control

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...

Improper access control

lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/...

CVE-2007-0078

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb...

Improper access control

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb...

CVE-2007-0076

Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb...

Improper access control

Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb...