PT-2009-1139 · Web Wiz · Web Wiz Guestbook

Cold Zero · Publicado 2009-04-02 · Atualizado 2017-10-11 · CVE-2003-1571

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Web Wiz Guestbook versions 6.0 through 8.21

Description The issue allows remote attackers to download the database and obtain sensitive information via a direct request for "database/WWGguestbook.mdb" due to insufficient access control.

Recommendations For versions 6.0 through 8.21, consider restricting access to the database file WWGguestbook.mdb to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2003-1571

Produtos afetados

Web Wiz Guestbook

Referências · 5

• 🔥 https://exploit-db.com/exploits/7488 · Exploit
• http://osvdb.org/2492 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1571 · Nota de Segurança
• http://secunia.com/advisories/9639 · Aviso do Fabricante
• http://ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863 · Nota