Description
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password.
References
- 9159 vdb-entry
- 1011026 vdb-entry
- wwwguestbook-url-information-disclosure(17077) vdb-entry