CVE-2008-5885

The CVE-2008-5885 entry concerns Net Guys ASPired2Quote, where sensitive data is stored under the web root with insufficient access control. A remote attacker can directly request admin/quote.mdb and download the database file containing usernames and passwords, exposing partial confidentiality. ...