EUVD-2011-1665

Malware in sbrugna...

CVE-2011-1665

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/...

Improper access control

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/...

CVE-2011-1665

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/...

PT-2011-3276

Name of the Vulnerable Software and Affected Versions PHPBoost version 3.0 Description The issue allows remote attackers to obtain sensitive information, specifically backup SQL files, due to insufficient access control. This is possible by making a direct request for predictable filenames in the...