CVE-2009-4799

Diskos CMS 6.x contains a vulnerability where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to download the database via direct requests to artikler_prod.mdb or medlemmer.mdb. The issue is characterized by a network attack vector, low atta...