CVE-2010-0665

CVE-2010-0665 relates to JAG (Just Another Guestbook) 1.14. The issue is an information disclosure due to insufficient access control: an attacker can directly request jag/database.sql from the web root to obtain sensitive data. The NVD entry cites a base score of 5.0 (Medium) with network attack...