CVE-2007-0880: Capital Request Forms

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for inc/common_db.inc.

Affected products

• Capital Request Forms Capital Request Forms: any version

Published 2007-02-12. Last modified 2026-06-16.