Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password for a SQL database via a GetInitializationData request, which includes the information in the UserName and Password tags of the response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Project Server 2003 'PDSRequest.ASP' XML请求信息泄露漏洞
Vulnerability Description
Microsoft Project Server 2003中的projectserver/logon/pdsrequest.asp存在信息泄露漏洞。远程认证用户可以通过GetInitializationData请求获取SQL数据库的MSProjectUser密码(在响应的UserName和Password标签中包含该信息) 。
CVSS Information
N/A
Vulnerability Type
N/A