CVE-2008-6955: Exposure of Sensitive Information to an Unauthorized Actor

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini...