CVE-2008-5765

WorkSimple 1.2.1 is affected: sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the database file (data/usr.txt) via a direct request. The public sources (NVD/CVE records) describe the vulnerability as improper access control that exposes u...

CVE-2008-5765

creationtimestamp| type| source ---|---|--- 2008-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7481...

CVE-2006-5765

Article Script 1.6.3 and earlier are vulnerable to an SQL injection in rss.php via the category parameter. The root cause is insufficient sanitization before SQL usage, enabling remote attackers to execute arbitrary SQL commands and potentially access or modify data. Exploitation details are docu...