medium5.0Public exploit code
CVE-2008-5562
ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASP PORTAL - Remote Database Disclosure2008-12-06 · webapps · asp · Verified
Impact
ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aspapps | Aspportal | Version _nil_ |