5
CVE-2002-1886
- EPSS 2.84%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:00:14
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginTightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tightauction ≫ Tightauction Version3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.84% | 0.848 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html
http://www.iss.net/security_center/static/10310.php
http://www.securityfocus.com/bid/5850