PT-2009-2239 · Yourplace · Yourplace

Osirys · Publicado 2009-04-29 · Atualizado 2017-09-29 · CVE-2008-6770

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: YourPlace versions 1.0.2 and earlier

Description: The issue allows remote attackers to access a database containing user credentials via a direct request for users.txt, due to insufficient access control of sensitive information stored under the web root.

Recommendations: For versions 1.0.2 and earlier, restrict access to the users.txt file to prevent unauthorized access to user credentials. Consider relocating sensitive information outside of the web root or implementing proper access controls to mitigate the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-6770

Produtos afetados

Yourplace

Referências · 5

• 🔥 https://exploit-db.com/exploits/7545 · Exploit
• 🔥 http://securityfocus.com/bid/32971 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47565 · Nota
• http://secunia.com/advisories/33272 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6770 · Nota de Segurança