CVE

Id
29960  
CVE No.
CVE-2007-6603  
Status
Candidate  
Description
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.  
Phase
Assigned (20071231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316971 29960 CVE-2007-6603 MILW0RM:4804  View
316972 29960 CVE-2007-6603 URL:http://www.milw0rm.com/exploits/4804  View
316973 29960 CVE-2007-6603 OSVDB:40572  View
316974 29960 CVE-2007-6603 URL:http://osvdb.org/40572  View
316975 29960 CVE-2007-6603 SECUNIA:28261  View
316976 29960 CVE-2007-6603 URL:http://secunia.com/advisories/28261  View
316977 29960 CVE-2007-6603 XF:hotornotclone-backup-info-disclosure(39344)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57795 JVNDB-2007-006487 SkyFex Client の SkyFexClient.ocx におけるバッファオーバーフローの脆弱性 SkyFex Client の SkyFexClient.ocx の特定の ActiveX コントロールには、バッファオーバーフローの脆弱性が存在します。 CVE-2007-6605 29960 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006487.html  View