CVE-2003-1571 | BDVDB-2026-35875 Detail

Description#

Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that 8.21 is also affected.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863
http://www.osvdb.org/2492
https://www.exploit-db.com/exploits/7488
http://secunia.com/advisories/9639

Exploit#

https://www.exploit-db.com/exploits/7488

History#

Version 12009-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.