NVD

Id
6800  
Name
CVE-2008-7069  
Description
All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-25  
Modified Date
2009-08-25  
Seq
2008-7069  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38777 6800 CVE-2008-7069 7266  View
38778 6800 CVE-2008-7069 allclubcms-accms-info-disclosure(47121)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43342 JVNDB-2009-004349 ACCMS におけるデータベース設定情報を取得される脆弱性 All Club CMS (ACCMS) は、不十分なアクセスコントロールで重要な情報を Web ルート配下に格納するため、データベース設定情報を取得される脆弱性が存在します。 CVE-2008-7069 37182 CVE-2008-7069 6800 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004349.html 2009-08-25 2012-09-25 View