CVE-2008-0135

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-01-08 · updated 2026-06-16
Weakness: CWE-264

Description

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.

Affected products

Snitz Communications Snitz Forums 2000: through 3.4.06; 3.0, 3.1, 3.1-sr4, 3.2.03, 3.3, 3.3.01 (+6)

References

http://hackerscenter.com/archive/view.asp?id=28145
http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
http://www.securityfocus.com/archive/1/485836/100/200/threaded
http://www.securityfocus.com/archive/1/485894/100/200/threaded
http://hackerscenter.com/archive/view.asp?id=28145
http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
http://www.securityfocus.com/archive/1/485836/100/200/threaded
http://www.securityfocus.com/archive/1/485894/100/200/threaded

Get alerted when CVE-2008-0135 or the next vulnerability affects your stack