Capital Request Forms: Security Vulnerabilities
Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for inc/common_db.inc.
CVSS Score
7.8
EPSS Score
0.003
Published
2007-02-12