Every CVE Search/ Get API key

CVE-2010-1065

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with...

5.0 MediumPublic exploit

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

Exploit likelihood

2.49%Down 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

Record
CVE-2010-1065
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

Record
CVE-2010-1065
Updated
2026-11-02
EUVDEUVD-2010-1097 No score

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

Record
EUVD-2010-1097
Updated
2026-11-03
GitHub AdvisoriesGHSA-836h-q5p2-g2rc No score

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with...

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb.

Record
GHSA-836h-q5p2-g2rc
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLebi soft Ziyaretci Defteri 7.5 - Database Disclosure2010-01-06

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1065 is a medium vulnerability (CVSS 5.0) in Lebisoft Ziyaretci Defteri, published March 23, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.49%, the 84th percentile. No source names a fixed version.

References

MoveEnter Open