Lucene search
HistoryJul 15, 2007 - 10:30 p.m.
CVE-2007-3774
cve-2007-3774
dvbbs
web security
access control
database security
remote attack
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.6%
Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb.
Affected configurations
Node
dvbbsdvbbsMatch7.1.0_sp1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dvbbs:dvbbs | dvbbs | eq | 7.1.0_sp1 |
Related
prion
prion
Improper access control
2007-07-15 22:30:00
nvd
nvd
CVE-2007-3774
2007-07-15 22:30:00
cvelist
cvelist
CVE-2007-3774
2007-07-15 22:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.6%
Related for CVE-2007-3774