CVE Catalog
CVE-2017-15877
CriticalSummary
The CVE-2017-15877 vulnerability in the db.php file in GPWeb 8.4.61 has insecure permissions that allow remote attackers to view the password and user database.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data, potentially leading to identity theft or other attacks.
Recommendation
It is recommended to secure the db.php file by setting appropriate permissions and conducting a security audit of the application.
Original NVD description (English source)
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.