PT-2010-1365
CVE-2009-4545
·
تاريخ النشر
2010-01-04
·
تاريخ التحديث
2017-09-19
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Logoshows BBS version 2.0
Description
The issue allows remote attackers to download a database due to insufficient access control. Sensitive information is stored under the web root, enabling attackers to access the database via a direct request for database/globepersonnel.mdb.
Recommendations
For version 2.0, restrict access to the database file database/globepersonnel.mdb to prevent unauthorized downloads. Consider implementing proper access controls to sensitive information stored under the web root.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾