Логотип exploitDog
bind:CVE-2009-2022
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2009-2022

Количество 2

Количество 2

nvd логотип

CVE-2009-2022

больше 16 лет назад

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.

CVSS2: 5
EPSS: Низкий
github логотип

GHSA-j3jp-46wx-ch5m

почти 4 года назад

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2009-2022

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.

CVSS2: 5
4%
Низкий
больше 16 лет назад
github логотип
GHSA-j3jp-46wx-ch5m

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.

4%
Низкий
почти 4 года назад

Уязвимостей на страницу