Search vulnerabilities

Results 1

Export CSV
CVE-2007-0149

EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for users.mdb.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Products