CVE-2007-0152 OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.md...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ohhasp | All versions | No fix listed |
References
- 64.38.62.221
- 33381 vdb-entry
- 20070106 ohhASP Remote Password Disclosure mailing-list
- ohhasp-ohhasp-info-disclosure(31342) vdb-entry