vendor:
N/A
by:
indoushka
6,4
CVSS
MEDIUM
ASP DB Download
N/A
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008
Al Sat Scripti Data Bass Download Vulnerability
A vulnerability exists in Al Sat Scripti Data Bass Download, which allows an attacker to download the database file. The attacker can access the database file by sending a request to the vulnerable URL http://127.0.0.1/ucuzalsat/ucuzalsat.mdb and logging in.
Mitigation:
The vendor should ensure that the database file is not accessible to unauthorized users.
