Vulnerability in Dir2web

CVE-2012-4069

Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db.

EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.

Affected products

  • Dir2web — versions 3.0
  • N/a — versions n/a

Weakness classification (CWE)

References