5
CVSSv2

CVE-2009-3597

Published: 08/10/2009 Updated: 25/01/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the database file via a direct request for autoconfig.dd.

Vulnerable Product Search on Vulmon Subscribe to Product

digitaldesign cms project digitaldesign cms 0.1

Exploits

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - __ __ _ __ - + ____/ /___ ______/ /__ (_)___ / /_____ _____ + - / __ / __ `/ ___/ //_/ / / __ \/ //_/ _ \/ ___/ - + / /_/ / /_/ / / / ,< / / /_/ / ,< / __/ / + - \__,_/\__,_/_/ /_/|_|_/ /\____/_/|_|\_ ...