CVE-2008-7063 Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ocean12tech faq manager pro | All versions | No fix listed |
References
- faqmanager-o12faq-info-disclosure(46954) vdb-entry
- 7258 exploit