Description
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:P/I:N/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://advisories.echo.or.id/adv/adv28-K-159-2006.txtExploit, Vendor Advisory
- http://secunia.com/advisories/19579Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/430369/100/0/threaded
- http://www.securityfocus.com/bid/17461Exploit
- http://www.vupen.com/english/advisories/2006/1316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25720
- http://advisories.echo.or.id/adv/adv28-K-159-2006.txtExploit, Vendor Advisory
- http://secunia.com/advisories/19579Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/430369/100/0/threaded
- http://www.securityfocus.com/bid/17461Exploit
- http://www.vupen.com/english/advisories/2006/1316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25720
Timeline
- Published
- Apr 11, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified