Vulnerabilities > Chaozz
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-03-24 | CVE-2009-1053 | Permissions, Privileges, and Access Controls vulnerability in Chaozz Chaozzdb 1.0/1.1 chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv. | 5.0 |
| 2009-03-24 | CVE-2009-1052 | Permissions, Privileges, and Access Controls vulnerability in Chaozz Fireant 1.0/1.2 FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv. | 5.0 |
| 2009-03-24 | CVE-2009-1051 | Permissions, Privileges, and Access Controls vulnerability in Chaozz Fubarforum FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv. | 5.0 |