Description
JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb.
Unscored
CVE-2008-6375
EUVD-2008-6345GHSA-vxx3-mp5x-ghj6
JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the datab…
Published Mar 2, 2009 · Updated Aug 7, 2024 · Assigned by mitre