Aria-Security Team has discovered a security issue in RBlog, which can be exploited by malicious people to disclose sensitive information.

The security issue is caused due to incorrect permissions on "data/admin.mdb" and "data/rblog.mdb", which can be exploited to disclose the contents of the files.

The security issue is confirmed in version 1.0. Other versions may also be affected.

Solution
Restrict web access to "data/admin.mdb" and "data/rblog.mdb".

Provided and/or discovered by
Aria-Security Team

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area