Maxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for tagger.mdb.
References
Configurations
History
No history.
Information
Published : 2007-01-29 17:28
Updated : 2018-10-16 16:33
NVD link : CVE-2007-0545
Mitre link : CVE-2007-0545
JSON object : View
Products Affected
maxtricity
- tagger
CWE
