Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3x46-vw5g-qxj4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb.

Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb.

EPSS

Процентиль: 51%
0.00284
Низкий

Связанные уязвимости

nvd
больше 18 лет назад

Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb.

EPSS

Процентиль: 51%
0.00284
Низкий