Vulnerability in Asp-Dev Xm Events Diary
CVE-2008-5925
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.
EPSS: 0.012 (64.2th percentile) — read the EPSS interpretation.
Affected products
- Asp-dev Xm_events_diary
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)