CVE-2010-4145 Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspindir kisisel radyo script | All versions | No fix listed |
References
- packetstormsecurity.org exploit
- 41816 third-party-advisory vendor-advisory
- 15270 exploit