CVE-2008-6382
02.03.2009, 19:30
ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb.Enginsight
Vendor | Product | Version |
---|---|---|
aspportal | aspportal | 3.2.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration