Improper access control

2011-04-1002:51:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/.

CPENameOperatorVersion
phpboosteq3.0

CPE	Name	Operator	Version
	phpboost	eq	3.0

References

secunia.com/advisories/43949

exchange.xforce.ibmcloud.com/vulnerabilities/66474

www.exploit-db.com/exploits/17085