Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-5601

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Robs-projects
Products
Asp User Engine
CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Robs-projects
Products
Asp User Engine.net
CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb.

CVSS 2.0 · 5.0 Medium EPSS 7.3% KEV · Not listed
Vendors
Robs-projects
Products
Digital Sales Ipn