PT-2009-2239 · Yourplace · Yourplace

Osirys · Published 2009-04-29 · Updated 2017-09-29 · CVE-2008-6770

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: YourPlace versions 1.0.2 and earlier

Description: The issue allows remote attackers to access a database containing user credentials via a direct request for users.txt, due to insufficient access control of sensitive information stored under the web root.

Recommendations: For versions 1.0.2 and earlier, restrict access to the users.txt file to prevent unauthorized access to user credentials. Consider relocating sensitive information outside of the web root or implementing proper access controls to mitigate the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-6770

Affected Products

Yourplace

References · 5

• 🔥 https://exploit-db.com/exploits/7545 · Exploit
• 🔥 http://securityfocus.com/bid/32971 · Exploit
• http://secunia.com/advisories/33272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6770 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47565 · Note