CVE-2003-1213 in MaxWebPortal

Summary

The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 05/19/2005
• Disclosure: 12/31/2003
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-200 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.08020
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-1213
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-1213
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-1213/