CVE-2009-3830

CVE-2009-3830

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 33%
from disclosure to weaponsame day
Published on NVDOct 30
1st PoCOct 26
The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to _layouts/download.aspx.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.