CVE-2008-6147

ForumApp 3.3 is affected by an access-control weakness that stores sensitive data under the web root and permits remote retrieval of the database via direct requests to data/8690.mdb or data/8690BAK.mdb. The NVD description indicates network-based access with no authentication and partial confide...