Vlad Titarenko · Asp Vt Auth · CVE-2009-2024
**Name of the Vulnerable Software and Affected Versions**
Vlad Titarenko ASP VT Auth version 1.0
**Description**
The issue allows remote attackers to download the database file and obtain usernames and passwords via a direct request for a specific file, zHk8dEes3.txt, due to insufficient access control.
**Recommendations**
For version 1.0, restrict access to sensitive files, such as zHk8dEes3.txt, to prevent remote attackers from downloading the database file. Consider implementing proper access controls to protect sensitive information.