CVE-2009-0571 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 2.3% (pctl 83)
Patch early
A public exploit exists.
Description
admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 2.33% — more likely to be exploited than 83% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-02-13 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| ninjadesigns | mailist |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Mailist 3.0 - Insecure Backup / Local File Inclusion | 2009-02-06 |
References
→ the Explorer · watch your stack · NVD