Vulnerabilities > CVE-2007-0546 - Information Disclosure vulnerability in Toxiclab Shoutbox 1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
NONE Availability impact
NONE Summary
Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |