CVE-2008-5596

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Dec 16, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-55975.0Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the datCVE-2008-55985.0Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary directories via a .. (dotCVE-2008-55997.5SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the passwCVE-2008-56005.0Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to doCVE-2008-56015.0User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to downCVE-2008-56025.0Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download CVE-2008-56035.0ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download thCVE-2008-56046.8Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magic_quotes_gpc is disabled, allows remote attackers toCVE-2008-56057.5Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter tCVE-2008-56065.0Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remoteCVE-2008-56077.5SQL injection vulnerability in the JMovies (aka JM or com_jmovies) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQCVE-2008-56085.0ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download t
CVE-2008-5596: Medium severity, CVSS 5.0 | Vulnix