CVE-2008-5592

Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb.
Configurations

Configuration 1

cpe:2.3:a:iwrite:nightfall_personal_diary:1.0:*:*:*:*:*:*:*

Information

Published : 2008-12-16 07:07

Updated : 2017-09-29 01:32


NVD link : CVE-2008-5592

Mitre link : CVE-2008-5592

Products Affected
No products.
CWE