CVE-2005-0229: Citrusdb Customer Database

Medium severity, CVSS 5.0. EPSS: 7.7% chance of exploitation in the next 30 days.

CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.

Affected products

• Citrusdb Citrusdb Customer Database: version 0.1.2 only; version 0.2 only; version 0.2.1 only; version 0.3 only; version 0.3.1 only; version 0.3.5 only

Published 2005-04-27. Last modified 2026-06-16.