Vulnerability in Acnews
CVE-2005-2677
ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server.
EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.
Affected products
- Acnews
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)