Description
Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb.
References
- td-webdirectory-db-information-disclosure(34518) vdb-entry
- 36274 vdb-entry
- 25436 third-party-advisory
- 2755 third-party-advisory
- 20070525 Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulnerability mailing-list
- ADV-2007-1970 vdb-entry