Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8whw-6c85-qg7r

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.

aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.

EPSS

Процентиль: 46%
0.0023
Низкий

Связанные уязвимости

nvd
почти 17 лет назад

aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.

EPSS

Процентиль: 46%
0.0023
Низкий