Vulnerability CVE-2013-1807
Published: 2014-04-30   Modified: 2014-05-01

Description:
PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information via a direct request to the backup file in administration/db_backups/.

See advisories in our WLB2 database:
Topic
Author
Date
High
PHP-Fusion 7.02.05 XSS & LFI & SQL Injection
Janek Vind warax...
01.03.2013

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Php-fusion -> Php-fusion 

 References:
http://www.php-fusion.co.uk/news.php?readmore=569
http://www.waraxe.us/advisory-97.html
http://www.osvdb.org/90691
http://www.openwall.com/lists/oss-security/2013/03/03/2
http://www.openwall.com/lists/oss-security/2013/03/03/1
http://seclists.org/fulldisclosure/2013/Feb/154
http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html
Copyright 2024, cxsecurity.com

 

Back to Top