CVE-2007-3061
Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database…
published June 6, 2007
What it is
Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) cactushop6.mdb or (2) cactushop5.mdb.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.02582 · 85.1th percentile
- Published
- 2007-06-06T01:00Z
EPSS history
Timeline