CVEvulnerability

CVE-2005-1835

5.0 MEDIUM Published 2005-06-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-06-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-552

Description

NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.

Affected configurations

• nextweb nextweb \(i\)site

Weakness · CWE (1)

CWE-552 Files or Directories Accessible to External Parties weakness

Referenced by CWE · observed example (2)

CWE-219 Storage of File with Sensitive Data Under Web Root weakness
CWE-552 Files or Directories Accessible to External Parties weakness

References

http://marc.info/?l=bugtraq&m=111764682925083&w=2 Third Party Advisory
http://secunia.com/advisories/15560 Broken Link, Exploit, Vendor Advisory
http://securitytracker.com/id?1014085 Broken Link, Third Party Advisory, VDB Entry
http://marc.info/?l=bugtraq&m=111764682925083&w=2 Third Party Advisory
http://secunia.com/advisories/15560 Broken Link, Exploit, Vendor Advisory
http://securitytracker.com/id?1014085 Broken Link, Third Party Advisory, VDB Entry