CVE-2006-6350: Iisworks Listpics

High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days.

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb.

Affected products

• Iisworks Listpics: version 5.0 only

Published 2006-12-07. Last modified 2026-06-16.