Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5592. PoCs published by AlpHaNiX.
AI-analyzed exploit summary This is a writeup describing XSS and database disclosure vulnerabilities in NightFall software. No functional exploit code is provided.
Description
Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by AlpHaNiX · textwebappsphp
https://www.exploit-db.com/exploits/7351
This is a writeup describing XSS and database disclosure vulnerabilities in NightFall software. No functional exploit code is provided.
Classification
Writeup 90%
Attack Type
Xss | Info Leak
Complexity
Trivial
Reliability
Theoretical
Target:
NightFall (version unspecified)
No auth needed
Prerequisites:
Access to the login page or database path
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (4)
Core 4
Core References
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/7351
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/47111
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4742
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/33011
Scores
EPSS
0.0261
EPSS Percentile
83.4%
Details
CWE
CWE-264
Status
published
Products (1)
iwrite/nightfall_personal_diary
1.0
Published
Dec 16, 2008
Tracked Since
Feb 18, 2026