CoreCVE
Back

MEDIUM

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb

Published Mar 16, 2010

Description

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Mar 16, 2010
Updated Aug 7, 2024
Reserved Mar 16, 2010
Link CVE-2010-0984

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2010-0984

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Mar 16, 2010
Updated Aug 7, 2024
Link EUVD-2010-1009

GitHub

No data