CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:dblog:dblog_cms:2.0:*:*:*:*:*:*:*

Information

Published : 2007-09-21 12:17

Updated : 2018-10-15 14:40


NVD link : CVE-2007-5026

Mitre link : CVE-2007-5026


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

dblog

  • dblog_cms