Ratemysite

DATE	CVE	VULNERABILITY TITLE	RISK
2009-01-12	CVE-2008-5896	Permissions, Privileges, and Access Controls vulnerability in Codeavalanche Ratemysite NIL CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CARateMySite.mdb. network low complexity codeavalanche CWE-264	7.5