Description
NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.
References
- 20050601 [ZH2005-13SA] NEXTWEB (i)Site website management multiple mailing-list
- 15560 third-party-advisory
- 1014085 vdb-entry