CVE-2009-4585: UranyumSoft Listing Service stores sensitive information under the web root with insufficient access contro...

Security readout for executives and security teams

This is a legacy information disclosure issue in UranyumSoft Listing Service. The application reportedly placed a database file under the public web root without adequate access controls, letting a remote attacker download sensitive stored data. Business urgency depends on whether this old product is still deployed and internet-facing. Exposure is likely limited to sites still running UranyumSoft Listing Service with the database stored beneath a publicly served web directory. The source bundle does not provide confirmed vendor, version, CPE, or platform details. Prioritize a quick exposure check for any legacy public deployment. If present, treat it as urgent because the issue concerns direct database disclosure, not just service disruption. Mitigation focus: Check vendor or maintainer guidance for any available fixed release or advisory.; Move database files outside the web root where possible.; Block direct web access to database files and sensitive storage directories..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.