CVE-2008-5900 CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator passwo...
HighCVSS 7.5
EPSS 6.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CAArticles.mdb. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codeavalanche articles | = _nil_ | No fix listed |
References
- 33100 third-party-advisory vendor-advisory
- 4909 third-party-advisory
- articles-caarticles-info-disclosure(47351) vdb-entry
- 7471 exploit