CVE-2006-6449

Vulnerability CVE-2006-6449 affects Vt-Forum Lite 1.3 and earlier. The issue is that sensitive information (a database) is stored under the web root with insufficient access control, enabling remote attackers to download db/forum.mdb via a direct request. This describes a partial confidentiality ...