CVE-2007-0079 rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/admin.mdb or (2) data/rbl...
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/admin.mdb or (2) data/rblog.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rblog | All versions | No fix listed |
References
- 32572 vdb-entry
- 23538 third-party-advisory
- 2102 third-party-advisory
- www.aria-security.com
- 20070101 rblog Database Download Vulnerability mailing-list
- rblog-database-info-disclosure(31200) vdb-entry