Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: 2500mhz Component: Worksimple Clear all filters
TI-2008-05471 CVE-2008-5765 · GHSA-962j-gjgv-9xmr

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access…

Priority LOW 32

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for d…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05912 Published 2008-12-30 No fix listed CWE-264