NetSight
high7.8

CVE-2007-3774

Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a di…

Impact

Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Data/Dvbbs7.mdb.

Affected products

VendorProductAffected versions
DvbbsDvbbs
Version 7.1.0_sp1

References