CVE-2008-5898

CVE-2008-5898 concerns the CodeAvalanche Directory, where insufficient access control allows remote attackers to download the database file containing the administrator password through a direct request to _private/CADirectory.mdb. The NVD entry notes an exposed, sensitive database under the web ...