CVE-2007-0149

2007-01-09T13:28:00
ID CVE-2007-0149
Type cve
Reporter NVD
Modified 2018-10-16T12:31:25

Description

EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for users.mdb.