PT-2004-3320 · Abczone.It · Abczone.It Wwwguestbook

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2428

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Abczone.it WWWguestbook version 1.1

Description: The issue allows remote attackers to obtain sensitive information, including plaintext usernames and passwords, due to insufficient access control of the db/dbase.mdb file stored under the web document root.

Recommendations: For version 1.1, restrict access to the db/dbase.mdb file to prevent remote attackers from obtaining sensitive information. Consider relocating the file outside of the web document root or implementing proper access controls to mitigate the risk.

Exploit

Fix

Related Identifiers

CVE-2004-2428

Affected Products

Abczone.It Wwwguestbook

References · 4

• 🔥 http://securitytracker.com/id?1011026 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2428 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17077 · Note
• http://osvdb.org/9159 · Note