CVE-2008-5898

no score yetEPSS 6.4%

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for _private/CADirectory.mdb. NOTE: some of these details are obtained from third party information.

EPSS: 6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-01-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

codeavalanche:directory

References

http://secunia.com/advisories/33100
http://securityreason.com/securityalert/4907
https://exchange.xforce.ibmcloud.com/vulnerabilities/47353
https://www.exploit-db.com/exploits/7468
http://secunia.com/advisories/33100

Check your stack JSON