PT-2003-2161 · Maxwebportal · Maxwebportal

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1213

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MaxWebPortal version 1.30

Description The default installation of MaxWebPortal stores the portal database under the web document root with insecure access control. This allows remote attackers to obtain sensitive information via a direct request to the database file.

Recommendations For MaxWebPortal version 1.30, consider relocating the database outside of the web document root or implementing proper access controls to restrict unauthorized access to the database file database/db2000.mdb.

Exploit

Correção

Identificadores relacionados

CVE-2003-1213

Produtos afetados

Maxwebportal

Referências · 6

• 🔥 http://securityfocus.com/bid/7837 · Exploit
• 🔥 http://secunia.com/advisories/8979 · Exploit
• 🔥 https://exploit-db.com/exploits/22747 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2003-1213 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12279 · Nota