VulnerabilityModified
CVE-2008-6387
Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb.
MEDIUM 5.0EPSS 2.59%
Does this matter?
Lower severity and a low EPSS score (2.59%). Track it; it rarely justifies an emergency change on its own.
Description
Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.59% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- activewebsoftwares/quick tree view .net
- Source
- cve@mitre.org
References
- http://www.vupen.com/english/advisories/2008/3293Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46956
- https://www.exploit-db.com/exploits/7303
- http://www.vupen.com/english/advisories/2008/3293Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46956
- https://www.exploit-db.com/exploits/7303
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.