Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/20314 | vdb entry |
http://securitytracker.com/id?1013830 | vdb entry exploit |
http://www.osvdb.org/15994 | vdb entry |