CVE-2007-0094

The CVE-2007-0094 entry concerns Sven Moderow GuestBook 0.3a, where sensitive data is stored under the web root with insufficient access control. Remote attackers could directly download the database files gbook97.mdb or gbook.mdb located in ~db/, exposing passwords and other credentials. This vu...