5
CVSSv2

CVE-2009-1322

Published: 17/04/2009 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb.

Vulnerable Product Search on Vulmon Subscribe to Product

humayun shabbir bhutta asp product catalog 1.0

Exploits

#!/usr/bin/perl # By AlpHaNiX [NullAreaNet] # alpha[at]hackerbz # Made in Tunisia ########### # script : ASP Product Catalog Multiple Remote Exploits # download : sourceforgenet/project/showfilesphp?group_id=136315 # script homepage : aspprocatalogsourceforgenet/ ########### # Vulnerable : # XSS : In Search , # Example : # http: ...