VULNERABILITY INTELLIGENCE
CVE-2009-0328
CVSS score5 MEDIUM
EPSS probability7.29%
CISA KEVNot currently listed
Published2009-01-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb.