CVE-2009-0498

CVE-2009-0498 affects Virtual GuestBook (vgbook) 2.1. The data store is placed under the web root with insufficient access control, permitting remote attackers to directly download the database file (guestbook.mdb). This is a file-read access issue driven by improper access restrictions on web-ac...