Описание
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2007-4873
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36778
- http://forum.boesch-it.de/viewtopic.php?t=2791
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/066056.html
- http://osvdb.org/45479
- http://securityreason.com/securityalert/3173
- http://www.netvigilance.com/advisory0069
- http://www.securityfocus.com/archive/1/480601/100/0/threaded
EPSS
Процентиль: 66%
0.00508
Низкий
CVE ID
Связанные уязвимости
nvd
больше 18 лет назад
SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download arbitrary .inc files via a direct request, as demonstrated by admin/includes/dbtables.inc.
EPSS
Процентиль: 66%
0.00508
Низкий