Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.
References
Configurations
Information
Published : 2009-08-25 03:30
Updated : 2017-09-28 18:33
NVD link : CVE-2008-7063
Mitre link : CVE-2008-7063
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
ocean12tech
- faq_manager_pro