Unscored CVE-2007-3774 EUVD-2007-3758GHSA-v33q-cjfm-hjqj

Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download…

Published Jul 15, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb.

References

39747 vdb-entry
2886 third-party-advisory
20070711 Powered By Dvbbs Version 7.1.0 Sp1 By Pass mailing-list