ID de Prueba:	1.3.6.1.4.1.25623.1.0.10783
Categoría:	Web application abuses
Título:	PCCS-Mysql User/Password Exposure
Resumen:	It is possible to read the include file of PCCS-Mysql,; dbconnect.inc on the remote server.;; This include file contains information such as the username and password used to connect to; the database.
Descripción:	Summary: It is possible to read the include file of PCCS-Mysql, dbconnect.inc on the remote server. This include file contains information such as the username and password used to connect to the database. Solution: Versions 1.2.5 and later are not vulnerable to this issue. A workaround is to restrict access to the .inc file. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0707 BugTraq ID: 1557 http://www.securityfocus.com/bid/1557 Bugtraq: 20000804 PCCS MySQL DB Admin Tool v1.2.3- Advisory (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-08/0015.html XForce ISS Database: pccs-mysql-admin-tool
Copyright	Copyright (C) 2001 Alert4Web.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.