Unrated severityNVD Advisory· Published Nov 17, 2012· Updated Jun 16, 2026
CVE-2012-5892
CVE-2012-5892
Description
Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct request for data/havalite.db3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.