TI-2009-00824 CVE-2009-0866 · GHSA-xxw3-m93w-7c72pHNews Alpha 1 stores sensitive information under the web root with insufficient access…Priority LOW 28pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02509 · Published 2009-03-10 · No fix listed CWE-264
