Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/20314http://securitytracker.com/id?1013830http://www.osvdb.org/15994