← Back

Forest Blog

forest_blog

Vendor: Hostforest • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-5780
1Hostforest
1Forest Blog
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing passwords via a direct request for blog.mdb.