CVE-2008-6871: Merlix Educate Server

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified sensitive information via a direct request.

Affected products

• Merlix Educate Server: affected versions not specified

Published 2009-07-23. Last modified 2026-06-16.