CVE-2008-5572

CVE-2008-5572 pertains to Professional Download Assistant 0.1, where sensitive data is stored under the web root with insufficient access control. The description states that an attacker can download the database file (database/downloads.mdb) via a direct request, indicating exposure of stored da...

CVE-2008-5571

CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...