Vulnerability Details CVE-2012-4069
Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.1%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2012-4069
-
cpe:2.3:a:dir2web:dir2web:3.0