TI-2009-02491 CVE-2009-2606 · GHSA-mwf2-x6q4-2rwjASP Football Pool 2.3 stores sensitive information under the web root with insufficient…Priority LOW 27ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02229 · Published 2009-07-27 · No fix listed CWE-264
