PT-2008-6812 · Unknown · Simple Text-File Login Script

Osirys · Publicado 2008-12-30 · Atualizado 2017-09-29 · CVE-2008-5762

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Text-File Login Script (SiTeFiLo) version 1.0.6

Description The issue allows remote attackers to download the database file containing the password via a direct request for slog users.txt, due to insufficient access control of sensitive information stored under the web root.

Recommendations For Simple Text-File Login Script (SiTeFiLo) version 1.0.6, consider restricting access to the slog users.txt file to prevent unauthorized downloads, or relocate sensitive files outside of the web root to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-5762

Produtos afetados

Simple Text-File Login Script

Referências · 5

• 🔥 https://exploit-db.com/exploits/7444 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5762 · Nota de Segurança
• http://securityreason.com/securityalert/4847 · Nota
• http://osvdb.org/50712 · Nota
• http://secunia.com/advisories/33110 · Aviso do Fabricante