CVE-2006-3487

2006-07-1022:00:00

mitre

www.cve.org

virtuastore

web root

access control

vulnerability

database information

AI Score

6.2

Confidence

Low

EPSS

0.004

Percentile

74.6%

JSON

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.

References

securitytracker.com/id?1016421