CVE-2007-0594 Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request fo...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siteman | = 2.0.x2 | No fix listed |
References
- 33590 vdb-entry
- 2206 third-party-advisory
- 20070125 [x0n3-h4ck] Siteman 2.0.x2 Remote Md5 Hash Disclosure Vulnerability mailing-list