CVE-2008-6580 The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Red_Reservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request to (1) makered.mdb and (2) makered97.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| funscripts red reservations | All versions | No fix listed |
References
- redreservations-makered-info-disclosure(49817) vdb-entry
- 7440 exploit