cbcvebase.

Iyziforum Iyzi Forum vulnerabilities

1 known vulnerability affecting iyziforum/iyzi_forum.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2008-5901P3HIGHCVSS 7.5PoCv1.02009-01-12
CVE-2008-5901 [HIGH] CWE-264 CVE-2008-5901: iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access contr iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party information.
nvd
Iyziforum Iyzi Forum vulnerabilities | cvebase