CVE

Id
42020  
CVE No.
CVE-2009-4585  
Status
Candidate  
Description
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460381 42020 CVE-2009-4585 MISC:http://packetstormsecurity.org/0912-exploits/uranyumsoft-disclose.txt  View
460382 42020 CVE-2009-4585 EXPLOIT-DB:10823  View
460383 42020 CVE-2009-4585 URL:http://www.exploit-db.com/exploits/10823  View
460384 42020 CVE-2009-4585 OSVDB:61396  View
460385 42020 CVE-2009-4585 URL:http://www.osvdb.org/61396  View
460386 42020 CVE-2009-4585 SECUNIA:37912  View
460387 42020 CVE-2009-4585 URL:http://secunia.com/advisories/37912  View
460388 42020 CVE-2009-4585 XF:uslistingservice-db-info-disclosure(55220)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44266 JVNDB-2009-005273 MediaWiki の Special:Block 実装におけるクロスサイトスクリプティングの脆弱性 MediaWiki の SpecialBlockip.php の getContribsLink 関数の Special:Block 実装には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4589 42020 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005273.html  View