TI-2008-05319 CVE-2008-5603 · GHSA-7f92-cv7f-789vASPTicker 1.0 stores sensitive information under the web root with insufficient access…Priority LOW 28ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for news.mdb.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02615 · Published 2008-12-16 · No fix listed CWE-264