Untrusted Search Path Vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1

CVE-2010-5272 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

Untrusted search path vulnerability in Altova DatabaseSpy 2011 Enterprise Edition SP1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .qprj file. NOTE: some of these details are obtained from third party information.

Learn more about our Api Penetration Testing.