CVE-2009-4766

Published: Apr 13, 2010

Modified: Sep 16, 2024

PUBLISHED

Description

YP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

38119

third-party-advisory

x_refsource_SECUNIA

61467

vdb-entry

x_refsource_OSVDB

http://packetstormsecurity.org/1001-exploits/ypportal-disclose.txt

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2009-4766

Description

Affected Products

References