Vulnerabilities > Aspindir > KRM Haber

DATE CVE VULNERABILITY TITLE RISK
2010-05-06 CVE-2010-1736 Permissions, Privileges, and Access Controls vulnerability in Aspindir KRM Haber 1.0
KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for d_atabase/Krmdb.mdb.
network
low complexity
aspindir CWE-264
5.0