Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fhcg-89c3-g9hx

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.

EPSS

Процентиль: 46%
0.0023
Низкий

Связанные уязвимости

nvd
около 17 лет назад

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.

EPSS

Процентиль: 46%
0.0023
Низкий