cve/2008/CVE-2008-5780.md

CVE-2008-5780

Description

Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing passwords via a direct request for blog.mdb.

POC

Reference

• http://securityreason.com/securityalert/4842
• https://www.exploit-db.com/exploits/7466

Github

No PoCs found on GitHub currently.