CVE-2009-2022

Metadata

CVE-2009-2022
5.0
exchange.xforce.ibmcloud.com, exploit-db.com
2009-06-09
2017-09-29 06:09

Description

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.

Related Vulnerabilities