CVE-2009-0328: Robs-Projects Digital Sales Ipn

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb.

Affected products

• Robs-Projects Digital Sales Ipn: version _nil_ only

Published 2009-01-29. Last modified 2026-06-16.