CVE-2006-6378

BTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control. The vulnerability allows remote attackers to obtain configuration and save files via direct requests. Affected component: BTSaveMySql 1.2. Impact described in the sources includes partial confidentiality, i...