CVE

Id
35882  
CVE No.
CVE-2008-5765  
Status
Candidate  
Description
WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt.  
Phase
Assigned (20081230)  
Votes
None (candidate not yet proposed)  
Comments