CVE-2007-0091 newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| katy whitton web development newscmslite | All versions | No fix listed |
References
- 37548 vdb-entry
- newscmslite-newscms-info-disclosure(31222) vdb-entry
- 3066 exploit