CVE-2006-3780

CVE-2006-3780 affects Keyifweb Keyif Portal 2.0. The issue is insufficient access control that allows remote attackers to download sensitive database files exposed under the web root, via direct requests to (1) ANKET/anket.mdb, (2) HABER/keyifweb.mdb, (3) ASP/download.mdb, or (4) SAYAC/aktif.mdb ...