Description
RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for rmforum.mdb.
References
- 20070526 RMForum Database Disclosure Vulnerabilitiy mailing-list
- 36696 vdb-entry
- rmforum-database-information-disclosure(34561) vdb-entry
- ADV-2007-1969 vdb-entry
- 2754 third-party-advisory
- 25455 third-party-advisory