CVE-2008-6354 - The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb

Back Back to CVE browser

MEDIUM

The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb

Published Mar 2, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 2.33%

Description

The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://secunia.com/advisories/33130
third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://www.exploit-db.com/exploits/7427
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/33130		third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://www.exploit-db.com/exploits/7427		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 2, 2009

Updated Aug 7, 2024

Reserved Mar 2, 2009

Link CVE-2008-6354

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-6354

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-6354