← Database

CVE-2008-5765

MEDIUM CVSS: 5.0 Published: 2008-12-30 Modified: 2026-06-16

Description

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt.

Affected Platforms

2500Mhz Worksimple

Weakness Type

CWE-264

References