Lucene search
MitreCVE-2007-0546HistoryJan 29, 2007 - 5:28 p.m.
CVE-2007-0546
2007-01-2917:28:00
mitre
web.nvd.nist.gov
25
cve
toxiclab shoutbox
access control
database
passwords
remote attack
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.006
Percentile
78.4%
Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb.
Affected configurations
Node
toxiclabshoutboxMatch1
Related
cvelist
cvelist
CVE-2007-0546
2007-01-29 17:00:00
nvd
nvd
CVE-2007-0546
2007-01-29 17:28:00
prion
prion
Improper access control
2007-01-29 17:28:00
securityvulns
securityvulns
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.3
Confidence
Low
EPSS
0.006
Percentile
78.4%
Related for CVE-2007-0546