Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个MaxWebPortal漏洞
Vulnerability Description
MaxWebPortal 1.30版本的默认安装将门户网站数据库存储在具有不安全访问控制权限的web文档根下,远程攻击者借助 database/db2000.mdb的直接请求获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A