CVE-2010-0984: Acidcat CMS

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb.

Affected products

• Acidcat Acidcat CMS: up to and including 3.5.3; version 2.1.11 only; version 2.1.12 only; version 2.1.13 only; version 3.3.5 only; version 3.4.0 only; …

Published 2010-03-16. Last modified 2026-06-16.