Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-0978. PoCs published by LionTurk.
AI-analyzed exploit summary This is a writeup describing a database disclosure vulnerability in KMSoft Guestbook v1.0, where the database file can be accessed directly via a predictable path. No exploit code is provided, only a description and dork for finding vulnerable instances.
Description
KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb.
Exploits (1)
This is a writeup describing a database disclosure vulnerability in KMSoft Guestbook v1.0, where the database file can be accessed directly via a predictable path. No exploit code is provided, only a description and dork for finding vulnerable instances.