CVE-2009-3597
digitaldesign cms project digitaldesign cms: no CVSS score yet. EPSS 3.2% chance of exploitation in the next 30 days.
Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for autoconfig.dd.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-552
- Published
- Modified
- Record from
- the NVD, synced
Affected
- digitaldesign_cms_project:digitaldesign_cms