CVE-2008-5765
2500mhz worksimple: no CVSS score yet. EPSS 5.9% chance of exploitation in the next 30 days.
WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt.
- EPSS
- 5.9% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- 2500mhz:worksimple