Description
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.
Unscored
CVE-2012-5892
EUVD-2012-5766GHSA-8p64-g888-56pp
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attack…
Published Nov 17, 2012 · Updated Aug 6, 2024 · Assigned by mitre