Security Advisory

CVE-2008-0135

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-01-08 19:00:00
Last updated 2024-08-07 07:32:23
Assigner mitre
State PUBLISHED

Description

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.