CVE-2007-5260: Asp-CMS

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMS_v100.mdb.

Affected products

• Asp-CMS Asp-CMS: version 1.0 only

Published 2007-10-06. Last modified 2026-06-16.