|
Family: CGI abuses --> Category: infos
EZsite Forum Discloses Passwords to Remote Users Vulnerability Scan
Vulnerability Scan Summary Checks for EZsiteForum.mdb password database
Detailed Explanation for this Vulnerability Test
The remote host is running EZsite Forum.
It is reported that this software stores usernames and passwords in
plaintext form in the 'Database/EZsiteForum.mdb' file. A remote user
can reportedly download this database.
Solution : No solution was available at the time. Configure your web server
to disallow the download of .mdb files.
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|