CVE-2009-1051 - FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv

Back Back to CVE browser

MEDIUM

FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv

Published Mar 24, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 1.21%

Description

FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (4)

http://e-rdc.org/v1/news.php?readmore=131
x_refsource_MISC
http://secunia.com/advisories/34358
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/501902/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1052
Advisory

Link	Providers	Tags
http://e-rdc.org/v1/news.php?readmore=131		x_refsource_MISC
http://secunia.com/advisories/34358		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/501902/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1052		Advisory