CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

CVE-2007-5026

CVE-2007-5026 affects dBlog CMS (likely version 2.0). The issue arises from storing sensitive data under the web root with insufficient access control, enabling remote attackers to directly request dblog.mdb and download the admin password hash database. Public details confirm the vulnerability d...