CVE-2009-0571: Ninjadesigns Mailist

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory.

Affected products

• Ninjadesigns Mailist: version 3.0 only

Published 2009-02-13. Last modified 2026-06-16.