{ "schema_version": "1.4.0", "id": "GHSA-cfmh-jfvw-h4h6", "modified": "2022-05-01T02:10:43Z", "published": "2022-05-01T02:10:42Z", "aliases": [ "CVE-2005-2677" ], "details": "ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2677" }, { "type": "WEB", "url": "http://securitytracker.com/id?1014749" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2005-08-23T04:00:00Z" } }