PT-2011-3276
CVE-2011-1665
·
تاريخ النشر
2011-04-10
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PHPBoost version 3.0
Description
The issue allows remote attackers to obtain sensitive information, specifically backup SQL files, due to insufficient access control. This is possible by making a direct request for predictable filenames in the cache/backup/ directory.
Recommendations
For PHPBoost version 3.0, consider restricting access to the cache/backup/ directory to prevent unauthorized access to sensitive information. As a temporary workaround, restrict access to the cache/backup/ directory until a proper fix is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾