CVE-2007-2944

2007-05-3100:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb. NOTE: this issue was originally reported for “webCMS,” but this was an error by an unreliable researcher.