high7.5Public exploit code
CVE-2007-0091
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NewsCMSLite - 'newsCMS.mdb' Remote Password Disclosure2007-01-01 · webapps · asp · Verified
Impact
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Katy Whitton Web Development | Newscmslite | All versions |