CVE-2008-1752: Achmad Zaenuri Ezradius

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini. NOTE: some of these details are obtained from third party information.

Affected products

Published 2008-04-11. Last modified 2026-06-16.