CVE-2009-0828: Freedville Quotebook

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request.

Affected products

• Freedville Quotebook: affected versions not specified

Published 2009-03-05. Last modified 2026-06-16.