CVEvulnerability
CVE-2008-5885
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/quote.mdb. NOTE: some of these details are obtained from third party information.
Affected configurations
• thenetguys aspired2quote nil
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33130 Vendor Advisory
- http://securityreason.com/securityalert/4898 securityreason.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47325 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7446 www.exploit-db.com
- http://secunia.com/advisories/33130 Vendor Advisory
- http://securityreason.com/securityalert/4898 securityreason.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47325 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7446 www.exploit-db.com