PT-2004-3320 · Abczone.It · Abczone.It Wwwguestbook

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2428

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Abczone.it WWWguestbook version 1.1

Description: The issue allows remote attackers to obtain sensitive information, including plaintext usernames and passwords, due to insufficient access control of the db/dbase.mdb file stored under the web document root.

Recommendations: For version 1.1, restrict access to the db/dbase.mdb file to prevent remote attackers from obtaining sensitive information. Consider relocating the file outside of the web document root or implementing proper access controls to mitigate the risk.

Exploit

Correção

Identificadores relacionados

CVE-2004-2428

Produtos afetados

Abczone.It Wwwguestbook

Referências · 4

• 🔥 http://securitytracker.com/id?1011026 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17077 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2428 · Nota de Segurança
• http://osvdb.org/9159 · Nota