Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8p32-q5c5-q65x

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database/shopping650.mdb. NOTE: some of these details are obtained from third party information.

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database/shopping650.mdb. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 89%
0.04514
Низкий

Связанные уязвимости

nvd
около 17 лет назад

VP-ASP Shopping Cart 6.50 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database containing the password via a direct request for database/shopping650.mdb. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 89%
0.04514
Низкий