PatchTheCVE: robs-projectshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2008-6494: ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which alhttps://patchthecve.com/cve/CVE-2008-6494.htmlhttps://patchthecve.com/cve/CVE-2008-6494.htmlTue, 16 Jun 2026 23:02:19 +0000MEDIUM 5.0: ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb.CVE-2009-0328: ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the https://patchthecve.com/cve/CVE-2009-0328.htmlhttps://patchthecve.com/cve/CVE-2009-0328.htmlTue, 16 Jun 2026 23:04:47 +0000MEDIUM 5.0: ROBS-PROJECTS Digital Sales IPN (aka DS-IPN.NET or DS-IPN Paypal Shop) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb.CVE-2008-5601: User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which ahttps://patchthecve.com/cve/CVE-2008-5601.htmlhttps://patchthecve.com/cve/CVE-2008-5601.htmlTue, 16 Jun 2026 23:00:39 +0000MEDIUM 5.0: User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb.