VulnerabilityModified

CVE-2008-6055

PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

MEDIUM 5.0EPSS 1.15%

Does this matter?

Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own.

Description

PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 1.15% probability · 65th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: preprojects/pre classified listings
Source: cve@mitre.org

References

http://packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txtExploit
http://secunia.com/advisories/33197Vendor Advisory
http://packetstorm.linuxsecurity.com/0812-exploits/preaspclass-disclose.txtExploit
http://secunia.com/advisories/33197Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.