Test ID:	1.3.6.1.4.1.25623.1.0.11590
Category:	CGI abuses
Title:	MPC SoftWeb Guestbook database disclosure
Summary:	NOSUMMARY
Description:	Description: The remote server is running MPCSoftwebGuestbook a set of .asp scripts to manage an online guestbook. This release comes with a database called 'mpcsoftware_guestdata.mdb', usually located under /database/ which contains sensitive information, such as the news site administrator password. An attacker may use this flaw to gain unauthorized access to the remote site and potentially edit it. Note that this server is also vulnerable to a cross-site-scripting attack which allows an attacker to have javascript code executed on the browser of other hosts. Solution : Prevent the download of .mdb files from your website. Risk factor : High
Cross-Ref:	BugTraq ID: 7389 BugTraq ID: 7390
Copyright	This script is Copyright (C) 2003 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.