Vulnerabilities > CVE-2007-0593 - Information Disclosure vulnerability in Siteman 1.1.11

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
siteman
NVD
Published: 2007-01-30
Updated: 2018-10-16

Summary

Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for data/members.txt.

Vulnerable Configurations

Part Description Count
Application
Siteman
1

References