CVE-2012-5298

CVE-2012-5298 concerns Mavili Guestbook (released November 2007). The vulnerability arises because guestbook.mdb is stored under the web root with insufficient access control, allowing remote attackers to read the database by direct request. The impact is exposure of guestbook data; exploitation ...