CVE-2006-3780: Keyifweb Keyif Portal

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) ANKET/anket.mdb, (2) HABER/keyifweb.mdb, (3) ASP/download.mdb, or (4) SAYAC/aktif.mdb in the database/A9S7G6ASD790 directory.

Affected products

• Keyifweb Keyif Portal: version 2.0 only

Published 2006-07-24. Last modified 2026-06-16.