CVE-2008-7006 Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php.
MediumCVSS 5.0
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpversion php vx guestbook | = 1.06 | No fix listed |
References
- 48156 vdb-entry
- 31850 third-party-advisory vendor-advisory
- 31174 exploit vdb-entry
- freephpvx-backupdb-information-disclosure(45150) vdb-entry
- 6456 exploit