CVE Certified
GHDB

filetype:asp DBQ=" * Server.MapPath("*.mdb")

prev next

Google search: filetype:asp DBQ=" * Server.MapPath("*.mdb")

Hits: 1632

Submited: 2004-09-18

This search finds sites using Microsoft Access databases, by looking for the the database connection string. There are forums and tutorials in the results, but also the real databases. An attacker can use this to find the name and location of the database and download it for his viewing pleasure, which may lead to information leakage or worse.