CVE-2008-5898

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CADirectory.mdb. NOTE: some of these details are obtained fr...

CVE-2008-5898

CVE-2008-5898 concerns the CodeAvalanche Directory, where insufficient access control allows remote attackers to download the database file containing the administrator password through a direct request to _private/CADirectory.mdb. The NVD entry notes an exposed, sensitive database under the web ...

CVE-2008-5898

creationtimestamp| type| source ---|---|--- 2008-12-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7468...