CVE-2009-0336 - Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb

Back Back to CVE browser

MEDIUM

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb

Published Jan 29, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 2.29%

Description

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/48075
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7806
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/48075		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7806		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 29, 2009

Updated Aug 7, 2024

Reserved Jan 29, 2009

Link CVE-2009-0336

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0336

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0336