Unrated severityNVD Advisory· Published Apr 13, 2010· Updated Apr 29, 2026
CVE-2009-4766
CVE-2009-4766
Description
YP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb.
Affected products
2cpe:2.3:a:yasirpro:ms-pro_portal_scripti:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:yasirpro:ms-pro_portal_scripti:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:yasirpro:ms-pro_portal_scripti:1.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- packetstormsecurity.org/1001-exploits/ypportal-disclose.txtnvdExploit
- secunia.com/advisories/38119nvdVendor Advisory
- www.osvdb.org/61467nvd
News mentions
0No linked articles in our index yet.