Insecure File Placement in PCCS MySQLDatabase Admin Tool Manager 1.2.4 and Earlier

Insecure File Placement in PCCS MySQLDatabase Admin Tool Manager 1.2.4 and Earlier

CVE-2000-0707 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.