medium5.0Public exploit code
CVE-2003-1571
Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Web Wiz Guestbook 8.21 - Database Disclosure2008-12-16 · webapps · asp · Verified
Impact
Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that 8.21 is also affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webwizguide | Web Wiz Guestbook | Versions 6.0, 8.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/9639
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863
- http://www.osvdb.org/2492
- https://www.exploit-db.com/exploits/7488
- http://secunia.com/advisories/9639
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=25863
- http://www.osvdb.org/2492
- https://www.exploit-db.com/exploits/7488