CVE-2007-0089 jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jgbbs | = 3.0-beta_1 | No fix listed |
References
- aria-security.com exploit
- 33376 vdb-entry
- 20070103 jgbbs mailing-list
- jgbbs-bbs-information-disclosure(31274) vdb-entry