Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Site Server样例文件泄露数据库信息漏洞
Vulnerability Description
Microsoft Site Server是Microsoft公司出品的一套WEB商务解决方案。Microsoft Site Server的一个样例文件默认的访问权限不正确，远程攻击者可以通过Web访问到此文件，从而暴露一些服务器信息。默认安装的Microsoft Site Server会在WEB目录下安装一些样例文件，其中包括/adsamples/config/site.csc，该文件中包含数据库的DSN、UID和PASS等信息。
CVSS Information
N/A
Vulnerability Type
N/A