Vulnerability Details CVE-2007-0091
newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.2%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2007-0091
-
cpe:2.3:a:katy_whitton_web_development:newscmslite:*