Detections
Analytics
CVE-2010-0123
high
Description
The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name."
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/56798
http://www.securityfocus.com/archive/1/509990/100/0/threaded