CVE-2008-5853 Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database...
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database credentials via a direct request for config.inc or (2) read database backups via a request for a backup/ URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chicomas | <= 2.0.4 | No fix listed |
| chicomas | = 2.0.3 | No fix listed |
References
- 30080 third-party-advisory vendor-advisory
- 4872 third-party-advisory
- www.bugreport.ir exploit
- 20081220 chicomas <=2.0.4 Multiple Vulnerabilities mailing-list
- 7532 exploit