Unrated severityNVD Advisory· Published Nov 17, 2012· Updated Apr 29, 2026
CVE-2012-5892
CVE-2012-5892
Description
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.