CVE-2024-6880: Insertion of Sensitive Information into Externally-Accessible File or Directory

During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms. Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt...

PT-2025-3687 · Megabip · Megabip

Name of the Vulnerable Software and Affected Versions: MegaBIP versions prior to 5.15 Description: The issue arises during the MegaBIP installation process, where a user is advised to change the default path to the administrative portal as a protection mechanism. However, the publicly available...