CVE-2008-6870

2009-07-2319:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.3%

JSON

Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.

References

exchange.xforce.ibmcloud.com/vulnerabilities/47107

www.exploit-db.com/exploits/7348