CVEvulnerability
CVE-2004-2608
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
SmartWebby Smart Guest Book stores SmartGuestBook.mdb (aka the "news database") under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account.
Affected configurations
• smartwebby smart guest book 2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/12401 Vendor Advisory
- http://securitytracker.com/id?1011084 Exploit
- http://www.osvdb.org/9363 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17146 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/12401 Vendor Advisory
- http://securitytracker.com/id?1011084 Exploit
- http://www.osvdb.org/9363 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17146 exchange.xforce.ibmcloud.com