Description
Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.
References
- uapplication-information-disclosure(20314) vdb-entry
- 1013830 vdb-entry
- 8609 exploit
- 20070107 Uguestbook Remote Password Disclosure Vulnerability mailing-list
- 15995 vdb-entry