Test Kennung:	1.3.6.1.4.1.25623.1.0.11590
Kategorie:	CGI abuses
Titel:	MPC SoftWeb Guestbook database disclosure
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote server is running MPCSoftwebGuestbook a set of .asp scripts to manage an online guestbook. This release comes with a database called 'mpcsoftware_guestdata.mdb', usually located under /database/ which contains sensitive information, such as the news site administrator password. An attacker may use this flaw to gain unauthorized access to the remote site and potentially edit it. Note that this server is also vulnerable to a cross-site-scripting attack which allows an attacker to have javascript code executed on the browser of other hosts. Solution : Prevent the download of .mdb files from your website. Risk factor : High
Querverweis:	BugTraq ID: 7389 BugTraq ID: 7390
Copyright	This script is Copyright (C) 2003 Renaud Deraison

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.