CVE-2008-5560 PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb.
MediumCVSS 5.0
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dazzlindonna postecards | All versions | No fix listed |
References
- 50629 vdb-entry
- 33067 third-party-advisory vendor-advisory
- 4725 third-party-advisory
- postecards-postcards-info-disclosure(47195) vdb-entry
- 7398 exploit