CVE-2005-1835

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-06-01 · updated 2026-06-16
Weakness: CWE-552

Description

NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.

Affected products

Nextweb (I)Site: all versions

References

http://marc.info/?l=bugtraq&m=111764682925083&w=2
http://secunia.com/advisories/15560
http://securitytracker.com/id?1014085
http://marc.info/?l=bugtraq&m=111764682925083&w=2
http://secunia.com/advisories/15560
http://securitytracker.com/id?1014085

Get alerted when CVE-2005-1835 or the next vulnerability affects your stack