CVE-2008-5600 Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.m...
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merlix teamworx server | = _nil_ | No fix listed |
References
- 33009 third-party-advisory vendor-advisory
- 4757 third-party-advisory
- merlix-teamworx-information-disclosure(47125) vdb-entry
- 7352 exploit