CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.

Link	Resource
http://hackerscenter.com/archive/view.asp?id=28145
http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
http://www.securityfocus.com/archive/1/485894/100/200/threaded
http://www.securityfocus.com/archive/1/485836/100/200/threaded

Configuration 1

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*

---

Published : 2008-01-08 07:46

Updated : 2018-10-15 09:58

---

NVD link : CVE-2008-0135

Mitre link : CVE-2008-0135

No products.

CWE-264