CVE-2008-5562 ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.
MediumCVSS 5.0
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspapps aspportal | = _nil_ | No fix listed |