WEB_MISC philboard.mdb access


Code: p1471

Severity: Warning


Description: This event is generated when a remote user attempts to access philboard.mdb on a web server port on an internal server. This may indicate an attempt to exploit a vulnerability in the default installation of Philboard bulletin board software, where the Philboard Access database is accessible to the Internet.

Impact: Information gathering, possible administrative access to the bulletin board.

Corrective: Move philboard.mdb to an inaccessible location and/or add security permissions to the directory in which it resides.