CVE-2010-0984

Acidcat CMS up to version 3.5.3 stores sensitive data under the web root with insufficient access control, allowing remote attackers to download a credentials database (databases/acidcat_3.mdb) via a direct request. This causes Confidentiality impact as described in CVE-2010-0984 (NVD): base CVSS...