PT-2007-4276 · Techno Dreams · Techno Dreams Web Directory / Search Engine

Published 2007-06-01 · Updated 2017-07-29 · CVE-2007-2979

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Techno Dreams Web Directory / Search Engine version 2.0

Description: The issue allows remote attackers to download the database via a direct request for Database.mdb due to insufficient access control of sensitive information stored under the web root.

Recommendations: For version 2.0, restrict access to the Database.mdb file to prevent unauthorized downloads, and consider implementing proper access controls for sensitive information stored under the web root.

Fix

Related Identifiers

CVE-2007-2979

Affected Products

Techno Dreams Web Directory / Search Engine

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-2979 · Security Note
• http://secunia.com/advisories/25436 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1970 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34518 · Note
• http://securityreason.com/securityalert/2755 · Note
• http://securityfocus.com/archive/1/469587/30/30/threaded · Note
• http://osvdb.org/36274 · Note