Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb.
| Software | From | Fixed in |
|---|---|---|
| logoshows / logoshows_bbs | 2.0 | 2.0.x |