Information disclosure in Paul Arbogast Accms

CVE-2008-7069

All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.

Vulnerability class: Information Disclosure

EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.

Affected products

Paul_arbogast Accms — versions 0.0.1a, 0.0.1c, 0.0.1d
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)