CVE-2008-5897 CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator p...
HighCVSS 7.5
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CodeAvalanche FreeWallpaper stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAFreeWallpaper.mdb. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codeavalanche freewallpaper | = _nil_ | No fix listed |
References
- 33100 third-party-advisory vendor-advisory
- freewallpaper-cafreewallpaper-info-disc(47352) vdb-entry
- 7470 exploit