LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://secunia.com/advisories/38247 | third party advisory vendor advisory |
http://osvdb.org/61845 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/55751 | vdb entry |
http://www.packetstormsecurity.com/1001-exploits/lookmer-disclose.txt | exploit |