high7.5Public exploit code
CVE-2008-6955
mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration detail…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mxCamArchive 2.2 - Bypass Configuration Download2008-11-17 · webapps · php · Verified
Impact
mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infireal | Mxcamarchive | Version 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/49886
- http://secunia.com/advisories/32751
- http://www.securityfocus.com/bid/32324
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46647
- https://www.exploit-db.com/exploits/7136
- http://osvdb.org/49886
- http://secunia.com/advisories/32751
- http://www.securityfocus.com/bid/32324
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46647
- https://www.exploit-db.com/exploits/7136