PT-2012-5897 · Mavili · Mavili Guestbook

Massive Panda · Published 2012-10-04 · Updated 2017-08-29 · CVE-2012-5298

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mavili Guestbook version as released in November 2007

Description The issue concerns insufficient access control to the guestbook.mdb database. This allows remote attackers to read the database by making a direct request to it.

Recommendations For the version as released in November 2007, consider restricting access to the guestbook.mdb file to prevent remote reading of the database.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-5298

Affected Products

Mavili Guestbook

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-01/0010.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-5298 · Security Note
• http://securityfocus.com/bid/51252 · Note
• http://code.google.com/p/maviliguestbook/issues/detail?id=1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72101 · Note