CVE-2007-2945 RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for rmforum.mdb.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for rmforum.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rmforum | All versions | No fix listed |
References
- 36696 vdb-entry
- 25455 third-party-advisory vendor-advisory
- 2754 third-party-advisory
- 20070526 RMForum Database Disclosure Vulnerabilitiy mailing-list
- ADV-2007-1969 vdb-entry
- rmforum-database-information-disclosure(34561) vdb-entry