CVE-2023-28864

Progress Chef Infra Server before 15.7 allows a local attacker to exploit a /var/opt/opscode/local-mode-cache/backup world-readable temporary backup path to access sensitive information, resulting in the disclosure of all indexed node data, because OpenSearch credentials are exposed. The data...

CVE-2021-20114

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files...

PT-2021-13779

Name of the Vulnerable Software and Affected Versions: TCExam versions 14.8.1 and earlier Description: The issue allows unauthenticated users to access the "/cache/backup/" directory, which contains sensitive database backup files, when TCExam is installed with default or recommended settings...

CVE-2011-1665

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/...

PT-2011-3276

Name of the Vulnerable Software and Affected Versions PHPBoost version 3.0 Description The issue allows remote attackers to obtain sensitive information, specifically backup SQL files, due to insufficient access control. This is possible by making a direct request for predictable filenames in the...

CVE-2011-1665: Undefined Security Weakness

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/...