CVE-2009-4585 UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db....
MediumCVSS 5.0
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspindir uranyumsoft listing service | All versions | No fix listed |
References
- packetstormsecurity.org exploit
- 37912 third-party-advisory vendor-advisory
- 10823 exploit
- 61396 vdb-entry
- uslistingservice-db-info-disclosure(55220) vdb-entry