5
CVSSv2

CVE-2009-0866

Published: 10/03/2009 Updated: 29/09/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database via a direct request for extra/genbackup.php.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

phnews phnews 1

Exploits

######################################################################################### [0x01] Informations: Name : pHNews Alpha 1 Download : wwwhotscriptscom/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : andry2000@hotmailit Notes : Proud to be Italian ###### ...