2009-07-23 19:00:00
mitre
PUBLISHED
Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified sensitive information via a direct request.