The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb.
References
Configurations
History
No history.
Information
Published : 2003-12-31 05:00
Updated : 2017-07-11 01:29
NVD link : CVE-2003-1213
Mitre link : CVE-2003-1213
CVE.ORG link : CVE-2003-1213
JSON object : View
Products Affected
maxwebportal
- maxwebportal
CWE