CVE-2008-7080 Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for....
MediumCVSS 5.0
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Team PHP PHP Classifieds Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for admin/backup/datadump.sql.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpclassifiedsscript php classifieds script | All versions | No fix listed |
References
- 32776 third-party-advisory vendor-advisory
- 50153 vdb-entry
- phpclassifiedsscript-datadump-info-disc(46803) vdb-entry
- 7206 exploit