CVE-2009-4545

Logoshows BBS 2.0 - Info Disclosure

Title source: llm

Description

Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ZoRLu · textwebappsphp

https://www.exploit-db.com/exploits/9400

View Code ZIP pw:eip

References (2)

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/9400

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/52365

Scores

EPSS 0.0369

EPSS Percentile 87.7%

Classification

CWE

CWE-264

Status draft

Affected Products (1)

logoshows/logoshows_bbs

Timeline

Published Jan 04, 2010

Tracked Since Feb 18, 2026