VULNERABILITY INTELLIGENCE
CVE-2008-7069
CVSS score7.5 HIGH
EPSS probability2.53%
CISA KEVNot currently listed
Published2009-08-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
All Club CMS (ACCMS) 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor