← Back

Iyzi Forum

iyzi_forum

Vendor: Iyziforum • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Iyziforum
1Iyzi Forum
Apr 23, 2026
Jan 12, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyzifo...Show more
iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party information.Show less