Back to feed
EUVD-2007-0095 · Published Jan 5, 2007
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.
Technologies
Katy_Whitton_Web_Development Newscmslite
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
