CVEvulnerability
CVE-2008-5931
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/blog.mdb. NOTE: some of these details are obtained from third party information.
Affected configurations
• the net guys aspired2blog
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33134 Vendor Advisory
- http://securityreason.com/securityalert/4931 securityreason.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47294 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7436 www.exploit-db.com
- http://secunia.com/advisories/33134 Vendor Advisory
- http://securityreason.com/securityalert/4931 securityreason.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47294 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7436 www.exploit-db.com