Back to feed
EUVD-2008-7077 · Published Aug 28, 2009
WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.log.
Technologies
Webidsupport Webid
Weaknesses
CWE-264
CVSS scores
- v2.05.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
