CVE-2010-1067

E-membres 1.0 stores sensitive data under the web root with insufficient access control, allowing remote retrieval of the database via a direct request to db/bdEMembres.mdb. The vulnerability affects the application’s web-accessible storage, enabling partial confidentiality loss. No exploit detai...