CVE-2008-5762

2008-12-3020:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

Simple Text-File Login Script (SiTeFiLo) 1.0.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for slog_users.txt.