CVE-2010-0978 - KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb

Back Back to CVE browser

MEDIUM

KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb

Published Mar 16, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 2.54%

Description

KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

http://osvdb.org/61487
vdb-entryx_refsource_OSVDBExploit
http://packetstormsecurity.org/1001-exploits/kmsoftgb-disclose.txt
x_refsource_MISCExploit
http://secunia.com/advisories/38076
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/11005
exploitx_refsource_EXPLOIT-DB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1003
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55376
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/61487		vdb-entryx_refsource_OSVDBExploit
http://packetstormsecurity.org/1001-exploits/kmsoftgb-disclose.txt		x_refsource_MISCExploit
http://secunia.com/advisories/38076		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/11005		exploitx_refsource_EXPLOIT-DB
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1003		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55376		vdb-entryx_refsource_XF