TI-2007-00086 CVE-2007-0091 · GHSA-q445-m72p-x8m3newsCMSlite stores sensitive information under the web root with insufficient access…Priority LOW 38newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02658 · Published 2007-01-05 · No fix listed
