aeNovo Database Content Disclosure Vulnerability

The problem is that the aeNovo database file "dbase/aeNovo1.mdb" by default
is accessible. you can disclose the ADMIN's password .
The Login Page : "logon.asp"