Filtered by vendor Hostforest
Subscribe
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-5780 | 1 Hostforest | 1 Forest Blog | 2017-09-28 | 5.0 MEDIUM | N/A |
Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing passwords via a direct request for blog.mdb. |