VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 25, 2009· Updated Apr 23, 2026

CVE-2008-7069

CVE-2008-7069

Description

All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.

Affected products

8
  • Paul Arbogast/Accms8 versions
    cpe:2.3:a:paul_arbogast:accms:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:paul_arbogast:accms:*:*:*:*:*:*:*:*range: <=0.0.2
    • cpe:2.3:a:paul_arbogast:accms:0.0.1a:*:*:*:*:*:*:*
    • cpe:2.3:a:paul_arbogast:accms:0.0.1c:*:*:*:*:*:*:*
    • cpe:2.3:a:paul_arbogast:accms:0.0.1d:*:*:*:*:*:*:*
    • cpe:2.3:a:paul_arbogast:accms:0.0.1e:*:*:*:*:*:*:*
    • cpe:2.3:a:paul_arbogast:accms:0.0.1f:*:*:*:*:*:*:*
    • cpe:2.3:a:paul_arbogast:accms:0.0.1g:*:*:*:*:*:*:*
    • cpe:2.3:a:paul_arbogast:accms:0.0.1h:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.