---
cve: "CVE-2009-2024"
severity: "LOW"
cvss: 3.1
epss: "2.3%"
vendor: "n/a"
kev: false
exploited: false
published: "2009-06-09 19:30:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-17T07:45:47+02:00"
---

# CVE-2009-2024

> 3.1 LOW · 🧪 PoC

## Beschreibung

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt.

## Exploit-Evidenz

- [EDB-8889 — VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure](https://www.exploit-db.com/exploits/8889) ✅

## Referenzen

- <https://exchange.xforce.ibmcloud.com/vulnerabilities/50986>
- <https://www.exploit-db.com/exploits/8889>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2009-2024) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_