CVE

Id
34300  
CVE No.
CVE-2008-4183  
Status
Candidate  
Description
IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup via a direct request to a backup/backup-yyyy-dd-mm.sql filename.  
Phase
Assigned (20080923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375575 34300 CVE-2008-4183 MILW0RM:6390  View
375576 34300 CVE-2008-4183 URL:http://www.milw0rm.com/exploits/6390  View
375577 34300 CVE-2008-4183 CONFIRM:http://www.integramod.com/forum/viewtopic.php?f=3&t=5089  View
375578 34300 CVE-2008-4183 BID:31149  View
375579 34300 CVE-2008-4183 URL:http://www.securityfocus.com/bid/31149  View
375580 34300 CVE-2008-4183 SECUNIA:31749  View
375581 34300 CVE-2008-4183 URL:http://secunia.com/advisories/31749  View
375582 34300 CVE-2008-4183 SREASON:4300  View
375583 34300 CVE-2008-4183 URL:http://securityreason.com/securityalert/4300  View
375584 34300 CVE-2008-4183 XF:integramod-backup-info-disclosure(45096)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50931 JVNDB-2008-006241 ProActive CMS の index.php におけるディレクトリトラバーサルの脆弱性 ProActive CMS の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-4187 34300 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006241.html  View