Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7fv9-3xcq-hpq3

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD.

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD.

EPSS

Процентиль: 56%
0.00333
Низкий

Связанные уязвимости

nvd
около 19 лет назад

Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD.

EPSS

Процентиль: 56%
0.00333
Низкий