CVE-2010-0984

Description

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/55329

http://secunia.com/advisories/38084

http://osvdb.org/61436

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS