CVE-2009-3597 Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig....
MediumCVSS 5.0
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig.dd.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digitaldesign cms project digitaldesign cms | = 0.1 | No fix listed |
References
- 9115 exploit third-party-advisory vdb-entry
- digitaldesign-autoconfig-info-disclosure(51676) third-party-advisory vdb-entry