Vulnerabilities > CVE-1999-0753 - Unspecified vulnerability in Hughes Msql 2.0/2.0.10

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
hughes
nessus
exploit available
NVD
Published: 1999-08-17
Updated: 2008-09-09

Summary

The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories.

Vulnerable Configurations

Part Description Count
Application
Hughes
2

Exploit-Db

descriptionHughes Technologies Mini SQL (mSQL) 2.0/2.0.10 Vulnerability. CVE-1999-0753 . Remote exploits for multiple platform
idEDB-ID:19466
last seen2016-02-02
modified1999-08-18
published1999-08-18
reporterGregory Duchemin
sourcehttps://www.exploit-db.com/download/19466/
titleHughes Technologies Mini SQL mSQL 2.0/2.0.10 Vulnerability

Nessus

NASL familyCGI abuses
NASL idMSQL_OVERFLOW.NASL
descriptionThe remote web server appears to be running w3-msql. The installed version allows a malicious user to view restricted directories with specially crafted requests.
last seen2020-06-01
modified2020-06-02
plugin id10143
published1999-09-08
reporterThis script is Copyright (C) 1999-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/10143
titleMini SQL w3-msql Arbitrary Directory Access

References