CVE-2005-1425

Uapplication Uguestbook 1.0 - Info Disclosure

Title source: llm

Description

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Cyber-Zone · perlwebappsphp

https://www.exploit-db.com/exploits/8609

View Code ZIP pw:eip

References (5)

[Exploit] http://securitytracker.com/id?1013830

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/20314

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/456240/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/8609

[Third Party Advisory, VDB Entry] http://www.osvdb.org/15995

Scores

EPSS 0.0062

EPSS Percentile 70.0%

Details

CWE

CWE-264

Status published

Products (1)

uapplication/uguestbook 1.0

Published May 03, 2005

Tracked Since Feb 18, 2026