Description
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb.
Unscored
CVE-2008-5925
EUVD-2008-5895GHSA-fhcg-89c3-g9hx
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to …
Published Jan 21, 2009 · Updated Sep 16, 2024 · Assigned by mitre