CVE-2010-0765 fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fipsasp fipsforum | = 2.6 | No fix listed |
References
- packetstormsecurity.org exploit
- 11361 exploit
- fipsforum-forumfips-information-disclosure(56183) vdb-entry