CVE-2009-5019 Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.
MediumCVSS 5.0
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webwiz web wiz newspad | = 1.0 | No fix listed |
| webwiz web wiz newspad | = 1.01 | No fix listed |
| webwiz web wiz newspad | = 1.02 | No fix listed |
| webwiz web wiz newspad | = 1.03 | No fix listed |
References
- packetstormsecurity.org exploit
- 10637 exploit
- 15544 exploit
- newspad-newspad-info-disclosure(55043) vdb-entry