Vulnerabilities

TI-2008-06184 CVE-2008-6494 · GHSA-4hvv-pc2w-v673

ASP User Engine.NET stores sensitive information under the web root with insufficient…

LOW 27

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-03-20 No fix listed CWE-264

TI-2009-00308 CVE-2009-0328 · GHSA-hmqh-4jf7-28gf

ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive…

LOW 33

ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file contain…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07294 Published 2009-01-29 No fix listed CWE-264

TI-2008-05317 CVE-2008-5601 · GHSA-hmvr-j7c4-rf7v

User Engine Lite ASP stores sensitive information under the web root with insufficient…

LOW 28

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2008-12-16 No fix listed CWE-264

Vulnerabilities

Filters

ASP User Engine.NET stores sensitive information under the web root with insufficient…

ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive…

User Engine Lite ASP stores sensitive information under the web root with insufficient…