Unscored CVE-2009-1053 EUVD-2009-1054GHSA-95cc-488v-c5wr

chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to…

Published Mar 24, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.

References

20090317 [ECHO_ADV_105$2009] chaozzDB <= 1.2 Critical File Disclosure Vulnerability mailing-list
http://e-rdc.org/v1/news.php?readmore=129