Required CVE Record Information
Description
KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb.
References 4 Total
- exchange.xforce.ibmcloud.com: khaledmuratlist-mdb-file-disclosure(30661) vdb-entry
- securityfocus.com: 20061202 KhaledMuratList mdb mailing-list
- secunia.com: 23310 third-party-advisory
- securityreason.com: 1999 third-party-advisory
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- exchange.xforce.ibmcloud.com: khaledmuratlist-mdb-file-disclosure(30661) vdb-entryx_transferred
- securityfocus.com: 20061202 KhaledMuratList mdb mailing-listx_transferred
- secunia.com: 23310 third-party-advisoryx_transferred
- securityreason.com: 1999 third-party-advisoryx_transferred