Description
LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb.
References
- 38247 third-party-advisory
- 61845 vdb-entry
- lookmermusicportal-mdb-info-disclosure(55751) vdb-entry
- http://www.packetstormsecurity.com/1001-exploits/lookmer-disclose.txt