NewsTrax BETA 2.9 lets remote users download the user database, using the following exploit:
http://[target]/news/Dbase/nTrax.mdb
NewsTrax BETA 2.9 script stores usernames and passwords along with other configurations
in Dbase/nTrax.mdb, which is downloadable thru the web by remote users.