Vulnerability   
Search   
    Search 202850 CVE descriptions
and 87302 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11542
Category:CGI abuses
Title:Web Wiz Forums database disclosure
Summary:NOSUMMARY
Description:Description:

The remote server is running Web Wiz Site Forum, a set of .asp
scripts to manage online forums.

This release comes with a wwforum.mdb database, usually located
under admin/ which contains sensitive information, such as the
user passwords and emails.

An attacker may use this flaw to gain unauthorized access to the
remote forum site and potentially edit its content.

Solution : Prevent the download of .mdb files from your website.
Risk factor : High

Cross-Ref: BugTraq ID: 7380
CopyrightThis script is Copyright (C) 2003 Renaud Deraison

This is only one of 87302 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.