VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1016421 |
Configurations
Information
Published : 2006-07-10 15:05
Updated : 2008-09-05 14:07
NVD link : CVE-2006-3487
Mitre link : CVE-2006-3487
JSON object : View
CWE
Products Affected
virtuastore
- virtuastore