CVE-2008-5592

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Dec 16, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-55937.5Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execute arbitrary local fiCVE-2008-55947.5Multiple directory traversal vulnerabilities in index.php in Mini Blog 1.0.1 allow remote attackers to include and execute arbitrary local fCVE-2008-55957.5SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter.CVE-2008-55965.0Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackeCVE-2008-55975.0Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the datCVE-2008-55985.0Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dotCVE-2008-55997.5SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the passwCVE-2008-56005.0Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to doCVE-2008-56015.0User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to downCVE-2008-56025.0Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download CVE-2008-56035.0ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download thCVE-2008-56046.8Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers to
CVE-2008-5592: Medium severity, CVSS 5.0 | Vulnix