CVE-2009-4760

Winn ASP Guestbook 1.01 Beta - Info Disclosure

Title source: llm

Description

Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guestbook.mdb.

Exploits (1)

exploitdb WORKING POC VERIFIED
by ZoRLu · perlwebappsasp
https://www.exploit-db.com/exploits/8596

Scores

EPSS 0.0384
EPSS Percentile 88.2%

Details

CWE
CWE-264
Status published
Products (1)
winn/asp_guestbook 1.01 beta
Published Mar 29, 2010
Tracked Since Feb 18, 2026