Описание
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-4873
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36778
- http://forum.boesch-it.de/viewtopic.php?t=2791
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/066056.html
- http://osvdb.org/45479
- http://securityreason.com/securityalert/3173
- http://www.netvigilance.com/advisory0069
- http://www.securityfocus.com/archive/1/480601/100/0/threaded
EPSS
Процентиль: 73%
0.01491
Низкий
CVE ID
Связанные уязвимости
nvd
почти 19 лет назад
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
EPSS
Процентиль: 73%
0.01491
Низкий