CVE-2008-6374

2009-03-02T19:30:00
ID CVE-2008-6374
Type cve
Reporter cve@mitre.org
Modified 2017-09-29T01:33:00

Description

CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to db/MailingList.mdb.