Vulnerabilities > Siteman > Siteman > 2.0.x2

DATE CVE VULNERABILITY TITLE RISK
2007-01-30 CVE-2007-0594 Information Disclosure vulnerability in Siteman 2.0.X2
Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing password hashes via a direct request for db/siteman/users.MYD.
network
low complexity
siteman
5.0