CVE-2008-6008 hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct reques...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| herongyang hybook | = _nil_ | No fix listed |
References
- 32079 third-party-advisory vendor-advisory
- 20080927 hyBook Remote Password Disclouse Vulnerability mailing-list
- hybook-guestbook-hybook-info-disclosure(45513) vdb-entry