PT-2007-4276 · Techno Dreams · Techno Dreams Web Directory / Search Engine

Publicado 2007-06-01 · Atualizado 2017-07-29 · CVE-2007-2979

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Techno Dreams Web Directory / Search Engine version 2.0

Description: The issue allows remote attackers to download the database via a direct request for Database.mdb due to insufficient access control of sensitive information stored under the web root.

Recommendations: For version 2.0, restrict access to the Database.mdb file to prevent unauthorized downloads, and consider implementing proper access controls for sensitive information stored under the web root.

Correção

Identificadores relacionados

CVE-2007-2979

Produtos afetados

Techno Dreams Web Directory / Search Engine

Referências · 7

• http://vupen.com/english/advisories/2007/1970 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34518 · Nota
• http://securityreason.com/securityalert/2755 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2979 · Nota de Segurança
• http://secunia.com/advisories/25436 · Aviso do Fabricante
• http://securityfocus.com/archive/1/469587/30/30/threaded · Nota
• http://osvdb.org/36274 · Nota