Description
Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb (aka mdb-database/blog.msb).
References
- 15996 vdb-entry
- uapplication-information-disclosure(20314) vdb-entry
- 1013830 vdb-entry
- 8610 exploit