Vulnerabilities > Robs Projects
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-03-20 | CVE-2008-6494 | Permissions, Privileges, and Access Controls vulnerability in Robs-Projects ASP User Engine.Net ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb. | 5.0 |
| 2009-01-29 | CVE-2009-0328 | Permissions, Privileges, and Access Controls vulnerability in Robs-Projects Digital Sales IPN NIL ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb. | 5.0 |
| 2008-12-16 | CVE-2008-5601 | Permissions, Privileges, and Access Controls vulnerability in Robs-Projects ASP User Engine NIL User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb. | 5.0 |