TI-2008-05313 CVE-2008-5597 · GHSA-vf68-46vh-46cpCold BBS stores sensitive information under the web root with insufficient access…Priority LOW 28Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02587 · Published 2008-12-16 · No fix listed CWE-264