CVE-2008-7063

Ocean12tech Faq Manager Pro - Information Disclosure

Title source: rule

Description

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stack · textwebappsphp

https://www.exploit-db.com/exploits/7258

View Code ZIP pw:eip

References (2)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/46954

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/7258

Scores

EPSS 0.0398

EPSS Percentile 88.2%

Classification

CWE

CWE-200

Status draft

Affected Products (1)

ocean12tech/faq_manager_pro

Timeline

Published Aug 25, 2009

Tracked Since Feb 18, 2026