Beveiligingsadvies

CVE-2005-4880

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2009-03-31 17:00:00

Laatst bijgewerkt 2024-09-17 03:37:59

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to (1) guestbook, (2) guestbook_ips2block, (3) ips2block, and (4) formmailer/logfile.csv.

← Alle CVE's bekijken Bekijk op cve.org ↗