5
CVE-2009-0760
- EPSS 2.46%
- Veröffentlicht 06.03.2009 06:50:20
- Zuletzt bearbeitet 16.06.2026 23:05:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginTeam Board 1.x and 2.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for data/team.mdb.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Team5 ≫ Team Board Version1.0.0
Team5 ≫ Team Board Version2.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.46% | 0.823 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://packetstorm.linuxsecurity.com/0902-exploits/teamboard-ddxss.txt
http://secunia.com/advisories/33839
http://www.osvdb.org/51752
https://www.exploit-db.com/exploits/7982