Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Chaozz Clear all filters
TI-2009-01007 CVE-2009-1053 · GHSA-95cc-488v-c5wr

chaozzDB 1.2 and earlier stores sensitive information under the web root with…

Priority LOW 25

chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.ts…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2009-03-24 No fix listed CWE-264
TI-2009-01006 CVE-2009-1052 · GHSA-g2pr-rwvh-8xx9

FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient…

Priority LOW 25

FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01213 Published 2009-03-24 No fix listed CWE-264
TI-2009-01005 CVE-2009-1051 · GHSA-fp59-j4v9-88wv

FubarForum 1.6 and earlier stores sensitive information under the web root with…

Priority LOW 25

FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01213 Published 2009-03-24 No fix listed CWE-264