Skip to content

CVE-2008-6147 ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/8690.mdb or (2) da...

MediumCVSS 5.0 EPSS 2.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/8690.mdb or (2) data/8690BAK.mdb.

Affected products

ProductAffected versionsFixed in
aspapp forumapp = 3.3 No fix listed

References

  • 33344 third-party-advisory vendor-advisory
  • 7599 exploit