CVE-2009-4545
EUVD-2009-451104.01.2010, 17:30
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| logoshows | logoshows_bbs | 2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration