aeNovo Database Content Disclosure Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: aeNovo Database Content Disclosure Vulnerability
From: farhad koosha <farhadkey@xxxxxxxxx>
Date: 12 Mar 2005 17:59:09 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm


The problem is that the aeNovo database file "dbase/aeNovo1.mdb" by default is 
accessible. you can disclose the ADMIN's password .
The Login Page : "logon.asp"

Prev by Date: RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
Next by Date: [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB
Previous by thread: Re: PlatinumFTP 1.0.18 remote DoS
Next by thread: [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB
Index(es):
- Date
- Thread