CVE-2008-5899

CodeAvalanche FreeForAll (CVE-2008-5899) stores sensitive information under the web root with inadequate access control, enabling remote attackers to download the administrator password database via a direct request to _private/CAFFAPage.mdb. NVD lists a CVSS v2 base score of 7.5 (HIGH; NETWORK a...