Description
Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.
References
- 1013603 vdb-entry
- http://www.persianhacker.net/news/news-2945.html
- 20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior mailing-list
- 14725 third-party-advisory