CVE-2006-6351

Description

KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30661

http://www.securityfocus.com/archive/1/453328/100/0/threaded

http://securityreason.com/securityalert/1999

http://secunia.com/advisories/23310

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS