CVE-2008-5896

CodeAvalanche RateMySite (CVE-2008-5896) is affected. The underlying issue is insufficient access control that stores sensitive data under the web root, allowing remote attackers to download the administrator password database file via a direct request to _private/CARateMySite.mdb. This is suppor...