CVE-2008-1752

CVE-2008-1752 affects ezRADIUS 0.1. The vulnerability is due to insufficient access control exposing sensitive files under the web root, allowing remote attackers to directly fetch config.ini or database.ini and obtain credentials. This is documented across multiple sources in the connected set. ...