CVE-2008-6870: Merlix Educate Server

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.

Affected products

• Merlix Educate Server: affected versions not specified

Published 2009-07-23. Last modified 2026-06-16.