Vulnerability Details CVE-2009-1322
ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.7%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2009-1322
-
cpe:2.3:a:humayun_shabbir_bhutta:asp_product_catalog:1.0