Vulnerability Details CVE-2009-1051
FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.4%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2009-1051
-
cpe:2.3:a:chaozz:fubarforum:*
-
cpe:2.3:a:chaozz:fubarforum:1.0
-
cpe:2.3:a:chaozz:fubarforum:1.1
-
cpe:2.3:a:chaozz:fubarforum:1.2
-
cpe:2.3:a:chaozz:fubarforum:1.3
-
cpe:2.3:a:chaozz:fubarforum:1.4
-
cpe:2.3:a:chaozz:fubarforum:1.5