5
CVSSv2

CVE-2003-1571

Published: 02/04/2009 Updated: 11/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that 8.21 is also affected.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

webwizguide web wiz guestbook 6.0

webwizguide web wiz guestbook 8.21

Exploits

< > ============= < > < > Web Wiz Guestbook v821 (WWGguestbookmdb) Remote Database Disclosure Vulnerability < > < > auther : Cold z3ro, wwwhackteachorg < > < > sitecom/[Path]/database/WWGguestbookmdb < > < > Dork : webwizguestbook_licenseasp < > < > ============= # ...