TI-2008-05317 CVE-2008-5601 · GHSA-hmvr-j7c4-rf7vUser Engine Lite ASP stores sensitive information under the web root with insufficient…Priority LOW 28User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02615 · Published 2008-12-16 · No fix listed CWE-264