CVE-2005-4859

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-31 · updated 2026-06-16

Description

mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mimic2.dat.

Affected products

Chitta Mimicboard: through mimiboard2_086

References

http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
http://www.securityfocus.com/bid/14779
http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
http://www.securityfocus.com/bid/14779

Get alerted when CVE-2005-4859 or the next vulnerability affects your stack