← Back

Hostforest

hostforest

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Forest Blog
forest_blog

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hostforest
1Forest Blog
Apr 23, 2026
Dec 30, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing passwords via a direct request for blog.mdb.