CVE-2008-5898

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CADirectory.mdb. NOTE: some of these details are obtained from third party information.
Configurations

Configuration 1

cpe:2.3:a:codeavalanche:directory:_nil_:*:*:*:*:*:*:*

Information

Published : 2009-01-12 08:00

Updated : 2017-09-29 01:32


NVD link : CVE-2008-5898

Mitre link : CVE-2008-5898

Products Affected
No products.
CWE