PT-2008-6664 · Aspticker · Aspticker

Zorlu · Publicado 2008-12-16 · Atualizado 2017-09-29 · CVE-2008-5603

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASPTicker version 1.0

Description The issue allows remote attackers to download the database file via a direct request for news.mdb, as sensitive information is stored under the web root with insufficient access control.

Recommendations For ASPTicker version 1.0, consider restricting access to the news.mdb file to prevent unauthorized downloads, and review the access control settings for sensitive information stored under the web root.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5603

Produtos afetados

Aspticker

Referências · 5

• 🔥 https://exploit-db.com/exploits/7359 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47143 · Nota
• http://secunia.com/advisories/23573 · Aviso do Fabricante
• http://securityreason.com/securityalert/4762 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5603 · Nota de Segurança