CVE-2008-1752

CVE-2008-1752 describes a sensitive information disclosure vulnerability in ezRADIUS 0.1, where configuration files (config.ini and database.ini) are stored under the web root with inadequate access controls. This allows unauthenticated remote attackers to directly request these files and obtain credentials. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impact. Despite its age, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.