CGI abuses : Web Wiz Forums database disclosure

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 146377 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.11542

Categoría: CGI abuses

Título: Web Wiz Forums database disclosure

Resumen: NOSUMMARY

Descripción: Description:

The remote server is running Web Wiz Site Forum, a set of .asp
scripts to manage online forums.

This release comes with a wwforum.mdb database, usually located
under admin/ which contains sensitive information, such as the
user passwords and emails.

An attacker may use this flaw to gain unauthorized access to the
remote forum site and potentially edit its content.

Solution : Prevent the download of .mdb files from your website.
Risk factor : High

Referencia Cruzada: BugTraq ID: 7380

Copyright This script is Copyright (C) 2003 Renaud Deraison

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.11542
Categoría:	CGI abuses
Título:	Web Wiz Forums database disclosure
Resumen:	NOSUMMARY
Descripción:	Description: The remote server is running Web Wiz Site Forum, a set of .asp scripts to manage online forums. This release comes with a wwforum.mdb database, usually located under admin/ which contains sensitive information, such as the user passwords and emails. An attacker may use this flaw to gain unauthorized access to the remote forum site and potentially edit its content. Solution : Prevent the download of .mdb files from your website. Risk factor : High
Referencia Cruzada:	BugTraq ID: 7380
Copyright	This script is Copyright (C) 2003 Renaud Deraison