CVE-2008-0297

CVE-2008-0297 describes a vulnerability in PhotoKorn that allows remote attackers to obtain database credentials. By directly requesting update/update3.php, an attacker can view sensitive information included in the script's output. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it requires no authentication and has low attack complexity, leading to a partial compromise of confidentiality. While there is no evidence of active exploitation in the wild, an ExploitDB entry exists, and there is minimal community discussion or media coverage surrounding this decade-old flaw.