CVE-2010-4145

Description

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.

Affected products

• aspindir / kisisel_radyo_script

References

• EXPLOIThttp://packetstormsecurity.org/1010-exploits/kisiselradyoscript-disclose.txt
• VENDOR_ADVISORYhttp://secunia.com/advisories/41816
• EXPLOIThttp://www.exploit-db.com/exploits/15270