CVE-2008-5901: Iyziforum Iyzi Forum

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party information.

Affected products

• Iyziforum Iyzi Forum: version 1.0 only

Published 2009-01-12. Last modified 2026-06-16.