5
CVSSv2

CVE-2008-6382

Published: 02/03/2009 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the database file via a direct request to ASPPortal.mdb.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

aspportal aspportal 3.2.5

Exploits

=================================================================== ASPPortal Free Version Remote Database Disclosure Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| `--------' | O CWH Underground Hacking Team `+-------------------- ...