Unrated severityNVD Advisory· Published Dec 1, 2010· Updated Apr 29, 2026

CVE-2009-5019

Description

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.

Affected products

Webwiz/Newspad4 versions
cpe:2.3:a:webwiz:web_wiz_newspad:1.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:webwiz:web_wiz_newspad:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:webwiz:web_wiz_newspad:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:webwiz:web_wiz_newspad:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:webwiz:web_wiz_newspad:1.03:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.org/files/view/84294/webwiznewspad-disclose.txtnvdExploit
www.exploit-db.com/exploits/10637nvdExploit
www.exploit-db.com/exploits/15544nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/55043nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000