Vulnerabilities > Cold BBS

DATE CVE VULNERABILITY TITLE RISK
2008-12-16 CVE-2008-5597 Permissions, Privileges, and Access Controls vulnerability in Cold BBS Cold BBS NIL
Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb.
network
low complexity
cold-bbs CWE-264
5.0