CVE-2008-6870

Merlix Educate Server - Access Control

Title source: rule

Description

Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.

Exploits (1)

exploitdb WRITEUP VERIFIED
by ZoRLu · textwebappsasp
https://www.exploit-db.com/exploits/7348

References (2)

Scores

EPSS 0.0192
EPSS Percentile 83.1%

Classification

CWE
CWE-264
Status draft

Affected Products (1)

merlix/educate_server

Timeline

Published Jul 23, 2009
Tracked Since Feb 18, 2026