CVEvulnerability
CVE-2009-1941
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt.
Affected configurations
• phpeasycode pad site scripts 3.6
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50911 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8850 www.exploit-db.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50911 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8850 www.exploit-db.com