PT-2017-14256

CVE-2017-15877

·

Published

2017-12-18

·

Updated

2019-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GPWeb version 8.4.61
Description The issue is related to insecure permissions in the db.php file, allowing remote attackers to access sensitive information, including passwords and user databases.
Recommendations For GPWeb version 8.4.61, update the permissions of the db.php file to restrict access and prevent unauthorized viewing of the password and user database.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-732: Incorrect Permission Assignment for Critical Resource
Related identifiers
CVE-2017-15877
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com