CVE-2008-6955: Infireal Mxcamarchive

High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days.

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.

Affected products

• Infireal Mxcamarchive: version 2.2 only

Published 2009-08-12. Last modified 2026-06-16.