5
CVSSv2

CVE-2008-5951

Published: 23/01/2009 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the database file via a direct request for workDB/templatemonster.mdb.

Vulnerable Product Search on Vulmon Subscribe to Product

aspapps template creature _nil_

Exploits

[~] ASP Template Creature DD/SQL Multiple Remote Vuln [~] [~] ---------------------------------------------------------- [~] Discovered By: ZoRLu msn: trt-turk@hotmailcom [~] [~] Home: wwwz0rlublogspotcom [~] [~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( [~] ----------------------------------------------------------- exp for dem ...