CVE-2008-5765

WorkSimple 1.2.1 is affected: sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the database file (data/usr.txt) via a direct request. The public sources (NVD/CVE records) describe the vulnerability as improper access control that exposes u...