CVE-2008-5596

Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnnerAdManager.mdb...

CVE-2008-5600

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb...

CVE-2008-5597

Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb...

CVE-2008-5596

CVE-2008-5596 affects Ikon AdManager 2.1 and earlier. The flaw is improper access control that stores sensitive data under the web root, enabling remote attackers to download the database file ikonBAnner_AdManager.mdb via a direct request. The NVD entry lists a Network attack vector with low comp...

CVE-2008-5602

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

CVE-2008-5592

CVE-2008-5592 affects Nightfall Personal Diary 1.0. The issue is improper access control: sensitive data is stored under the web root, allowing remote attackers to download the database file (users-zza21.mdb) via a direct request. The resulting impact is partial confidentiality loss. The availabl...

CVE-2008-5601

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb...

CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

CVE-2008-5603

ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for news.mdb...

Improper access control

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb...

Improper access control

PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb...

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5560

PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb...

CVE-2008-5562

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb...

Improper access control

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5562

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb...

CVE-2008-5562

CVE-2008-5562 : ASPPortal has insufficient access control that exposes the web root, allowing remote attackers to download the database file by requesting xportal.mdb directly. Public references indicate this is a straightforward local-file exposure rather than a remote-code execution flaw. The c...

CVE-2008-5560

CVE-2008-5560 : The PostEcards application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file postcards.mdb via a direct request. This represents a path traversal/poor access-control exposure enabling disclosur...

CVE-2008-5560

PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb...