CVE-2008-5981 PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) poll.mdb or (2) poll97.m...
MediumCVSS 5.0
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) poll.mdb or (2) poll97.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pacosdrivers pacpoll | = 4.0 | No fix listed |
References
- pacpoll-poll-information-disclosure(46976) vdb-entry
- 7318 exploit