Security Advisory

CVE-2004-2060

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2005-05-10 04:00:00
Last updated 2024-08-08 01:15:01
Assigner mitre
State PUBLISHED

Description

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names.