CVE-2009-4585
published 2010-01-06CVE-2009-4585: UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a…
PriorityP338medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
2.59%
83.3th percentile
UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db.mdb.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.org/0912-exploits/uranyumsoft-disclose.txthttp://secunia.com/advisories/37912http://www.exploit-db.com/exploits/10823http://www.osvdb.org/61396https://exchange.xforce.ibmcloud.com/vulnerabilities/55220http://packetstormsecurity.org/0912-exploits/uranyumsoft-disclose.txthttp://secunia.com/advisories/37912http://www.exploit-db.com/exploits/10823http://www.osvdb.org/61396https://exchange.xforce.ibmcloud.com/vulnerabilities/55220
2010-01-06
Published