5
CVSSv2

CVE-2004-1788

Published: 31/12/2004 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

ASP-Nuke 1.3 and previous versions places user credentials under the web document root with insufficient access control, which allows remote malicious users to obtain sensitive information via a direct request to main.mdb.

Vulnerable Product Search on Vulmon Subscribe to Product

asp-nuke asp-nuke 1.2

asp-nuke asp-nuke 1.3

asp-nuke asp-nuke 1.0

Exploits

source: wwwsecurityfocuscom/bid/9355/info A problem has been identified in ASP-Nuke when user credentials are stored on a system Because of this, an attacker may be able to gain unauthorized access to sensitive information wwwexamplecom/db/mainmdb ...