CVE-2007-2944 WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb. NOTE: this is...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb. NOTE: this issue was originally reported for "webCMS," but this was an error by an unreliable researcher.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wabcms | = 1.0 | No fix listed |
References
- 36698 vdb-entry
- 25453 third-party-advisory vendor-advisory
- 20070531 wrong but true: "webCMS" database disclosure is actually for wabCMS mailing-list
- 20070525 webCMS_1.00 Database Disclosure Vulnerabilitiy mailing-list
- www.xmors-security.com