medium5.0
CVE-2006-3487
VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information …
Impact
VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virtuastore | Virtuastore | Version 2.0 |