CVE-2011-1665

2011-04-1001:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/.

References

secunia.com/advisories/43949

www.exploit-db.com/exploits/17085

exchange.xforce.ibmcloud.com/vulnerabilities/66474