Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0498. PoCs published by Moudi.
AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in Virtual GuestBook v2.1, where the database file is accessible via a direct URL. No exploit code is provided, only the path to the exposed database.
Description
Virtual GuestBook (vgbook) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to guestbook.mdb.
Exploits (1)
This is a writeup describing an information disclosure vulnerability in Virtual GuestBook v2.1, where the database file is accessible via a direct URL. No exploit code is provided, only the path to the exposed database.