CVE-2006-3487

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-07-10

Last modified

2024-09-16

Affected products

• Virtuastore (Virtuastore)

References

• http://securitytracker.com/id?1016421