CVE-2008-5898 CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator passw...
HighCVSS 7.5
EPSS 6.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CADirectory.mdb. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codeavalanche directory | = _nil_ | No fix listed |
References
- 33100 third-party-advisory vendor-advisory
- 4907 third-party-advisory
- directory-cadirectory-info-disclosure(47353) vdb-entry
- 7468 exploit