CVE-2007-5787

CVE-2007-5787 affects Micro Login System 1.0. The vulnerability is due to insufficient access control that allows files containing passwords to be accessed from the web root. Specifically, an attacker can download a password file (userpwd.txt) by directly requesting it, enabling unauthorized disc...