CVE-2010-0123
The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name."
Date published : 2010-03-12
http://www.securityfocus.com/archive/1/509990/100/0/threaded