CVE-2008-5572

MEDIO 5.0CVE-2008-5572 · Published 15/12/2008 · updated 16/06/2026

In breve

CVE-2008-5572 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda professional download assistant (dotnetindex).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 7.4%, superiore al 94.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
professional download assistant dotnetindex	`= 0.1`	No fix yet

Description

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb.

References

osvdb.org/50547
secunia.com/advisories/33030 · Vendor Advisory
securityreason.com/securityalert/4748
exchange.xforce.ibmcloud.com/vulnerabilities/47148
exploit-db.com/exploits/7371

Altre vulnerabilità di professional download assistant

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free