Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2008-7063: Ocean12 FAQ Manager Pro allows remote database download
CVE-2008-7063 · published 17 years ago
Summary
Ocean12 FAQ Manager Pro stores its data files in a publicly reachable part of the website. This lets anyone who knows the direct link pull down the database that holds confidential information. Move the data files to a secured area and set proper permissions, or install any updates the vendor provides to lock down access.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ocean12tech | faq_manager_pro |
All versions
cpe:2.3:a:ocean12tech:faq_manager_pro:*:*:*:*:*:*:*:* |
Original advisory text
Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.
Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
5.0
Medium
Type
CWE-200Information Exposure
Timeline
Published25 Aug 2009
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2008-7063 · NVD
Track software like this
Free during beta