CVE-2019-11515

core/classes/dbbackup.php in Gila CMS 1.10.1 allows admin/dbbackup?download= absolute path traversal to read arbitrary files...

CVE-2019-6691

phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb parameter, related to the "--backup database" option...

CVE-2017-18091

The admin backupprogress action in Atlassian Fisheye and Crucible before version 4.4.3 the fixed version for 4.4.x and before 4.5.0 allows remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the filename of a backu...

Authentication-Bypass in CosmoShop ePRO V10.17.00 (and lower, maybe higher)

Issue: Authentication-Bypass in CosmoShop ePRO V10.17.00 and lower, maybe higher Author: l0om http://l0om.org Date: 26.02.2013 Overview: Cosmoshop provides an admin backup-function which saves .htaccess protected MySQL dump files in a backup directory. This directory does only prevent HTTP...

CVE-2008-7008: Improper Authentication

HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db...

eZoneScripts Hotornot2 Script (Admin Bypass) Multiple Remote Vulns

No description provided by source. + Hotornot2 Script Remote apload Admin Bypass Vulnerability ===== ++ by sniper code++============================================ Author : sniper code S.C.T-443 website : www.sec-code.com...

eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities

eZoneScripts Hotornot2 Script - Authentication Bypass Multiple Remote Vulnerabilities + Hotornot2 Script Remote apload Admin Bypass Vulnerability ===== ++ by sniper code++============================================ Author : sniper code S.C.T-443 website : www.sec-code.com...

DDL-Speed Script (acp/backup) Admin Backup Bypass Vulnerability

Exploit for unknown platform in category web applications =============================================================== DDL-Speed Script acp/backup Admin Backup Bypass Vulnerability =============================================================== DDL-Speed Script RFI Vulnerabilities...

DDL-Speed Script - acpbackup Admin Backup Bypass

DDL-Speed Script - acpbackup Admin Backup Bypass DDL-Speed Script RFI Vulnerabilities ======================================================================================================================= Critical Level : Dangerous Vendor site : http://ddl-speed.org/ Will be back soon Download :...

DDL-Speed Script (acp/backup) Admin Backup Bypass Vulnerability

No description provided by source. DDL-Speed Script RFI Vulnerabilities ======================================================================================================================= Critical Level : Dangerous Vendor site : http://ddl-speed.org/ Will be back soon Download :...

DDL-Speed Script - 'acp/backup' Admin Backup Bypass

DDL-Speed Script RFI Vulnerabilities ======================================================================================================================= Critical Level : Dangerous Vendor site : http://ddl-speed.org/ Will be back soon Download :...

CVE-2005-2013

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords...